last executing test programs: 15m44.457310213s ago: executing program 32 (id=404): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000210001000000000000000000020000000000000000eb39d171ab7f9b7747c00d1e000000140011006e657464657673696d30000000000000"], 0x30}}, 0x0) accept4(r1, 0x0, 0x0, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) 14m57.033058231s ago: executing program 33 (id=489): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 14m57.021022293s ago: executing program 4 (id=514): syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9b, &(0x7f0000000000)=ANY=[@ANYBLOB="9b03abe98397850d9289638d7120310994176d76ee8005e3bf5de76d569d98cc3ce7d4419c84da5f7e420900d136a14f65099da81db6c35a3e0c7fb9fe03b0fa265df2be125facefe74e0e21bb6a1889f400fb206292c4d96927f019fba2ad2987739c5e0d59351755863603e11b1131e4eb"]}]}) unshare(0x2a020480) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/208, 0xd0}], 0x1) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x402, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x40000003) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14m53.858135253s ago: executing program 4 (id=520): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 14m52.0561753s ago: executing program 4 (id=522): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) semget$private(0x0, 0x4, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 14m50.809958458s ago: executing program 4 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2004c040}, 0x4000050) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bind$nfc_llcp(r4, &(0x7f0000000240)={0x27, 0x0, 0x800, 0x7, 0x0, 0x0, "d929ff1711a17760770bee1177d716aebff5346eabff0755975b4d2200082000000000bfb0d10000000000000000004804068cd78924da00000000000400", 0x40000000000038}, 0x60) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 14m48.713470204s ago: executing program 4 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='timerslack_ns\x00') lseek(r3, 0xcbe, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='sched_switch\x00', r3, 0x0, 0x6}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r5, &(0x7f0000001140), 0x700, 0x2, 0x0) 14m46.37161732s ago: executing program 4 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x40000000) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r2, 0x8aa, 0x0, 0xc, 0x0, 0x0) 14m31.041171416s ago: executing program 34 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x40000000) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r2, 0x8aa, 0x0, 0xc, 0x0, 0x0) 13m12.853746286s ago: executing program 1 (id=680): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x7, @mcast1, 0x6}, 0x1c) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x112, 0x4, 0x0, &(0x7f0000000080)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, 0x0) 13m10.591909486s ago: executing program 1 (id=682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r3}, 0x10) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) preadv(r4, &(0x7f00000025c0)=[{&(0x7f0000000100)=""/184, 0xb8}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 13m9.40282223s ago: executing program 1 (id=685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) io_uring_enter(0xffffffffffffffff, 0x6252, 0xc09b, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) listen(r3, 0x8) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x4224}], 0x1, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 13m7.247872696s ago: executing program 1 (id=689): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000040)={0x9, [0x0, 0xfff, 0x6, 0x6, 0x15, 0xfff, 0x0, 0xe, 0x9, 0x1, 0xf29f, 0x6, 0x594, 0xfffd, 0x2, 0x8, 0x8, 0x4, 0x0, 0x7e, 0x8, 0xa, 0x54c, 0x1, 0x2, 0x1b8, 0x7ff, 0x3, 0x7, 0x0, 0x1, 0x1, 0x401, 0x6, 0x8, 0x3, 0x8000, 0x7, 0xf9f8, 0x7, 0x25, 0x1ff, 0x4, 0x8, 0xa, 0xad1, 0xb], 0xc}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), 0x0, 0xfff, r1, 0x0, 0xa0028000}, 0x38) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$setstatus(r2, 0x4, 0x2c00) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', &(0x7f0000000240)='erofs\x00', 0x2000000, 0x0) 13m4.628073256s ago: executing program 1 (id=694): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r4}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000140)=[r3], &(0x7f00000001c0)=[0xe], &(0x7f0000000200), &(0x7f0000000040)}) 13m2.218082557s ago: executing program 1 (id=711): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000ec0), 0x0, 0x2000c044) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x32a}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 12m45.292146962s ago: executing program 35 (id=711): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000ec0), 0x0, 0x2000c044) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x32a}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 8m20.931515051s ago: executing program 2 (id=1257): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x405a350) dup(0xffffffffffffffff) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) fchdir(r4) close(r4) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='nilfs2\x00', 0x0, 0x0) 8m18.055996915s ago: executing program 2 (id=1261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = io_uring_setup(0x3909, &(0x7f0000000140)={0x0, 0x2, 0x0, 0xfffff7fc}) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0xff}}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) close_range(r5, 0xffffffffffffffff, 0x0) 8m14.336619626s ago: executing program 2 (id=1263): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x4, 0x2, [{}, {0x277c}, {}, {}, {}, {0xd360}, {}, {0x0, 0x80000}], 0x10}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(0x0, 0x2, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, r2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4e, &(0x7f0000000780)=ANY=[], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000040)={'bond0\x00', 0xff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 8m11.778218536s ago: executing program 2 (id=1270): socket$inet_tcp(0x2, 0x1, 0x0) r0 = fanotify_init(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = creat(0x0, 0xecf86c37d53049cc) close(r3) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x641, 0x48001018, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) 8m9.678080144s ago: executing program 2 (id=1274): socket$caif_seqpacket(0x25, 0x5, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x148) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x20, 0x80, 0xfffffffc}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x2000, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) sendfile(r8, r9, 0x0, 0x7ffff000) 8m6.499443432s ago: executing program 2 (id=1279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='rxrpc_peer\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3f7, 0x200, 0x70bd25, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000, @void, @value, @void, @value}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timers\x00') read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0x2020) pread64(r2, &(0x7f0000033240)=""/102384, 0x18ff0, 0x100008) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x1c, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000040), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000490}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x6c, 0x0, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x11c, r8, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6cffa02, 0x12}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xdc, 0xbe, "98feeb26f1624999e0713a2136dc5679a7afe05290be408c00df8141a7e18cf21499a852c49d333d6c5b172f538504f0083ebcfcb0d0902605ba74a89ebc45bcbced22886aa5e26490f7385bcf65ac28399deaf91283027e7e8c39b32ca386d0e32a06cc370fca9eee6e7a4b4e06114ab2db0db80ee45756b659f409bfb6df656cdb2a6e4c3678242c8b8f52374fc35e38615eadf98611a81aa962e1d6d704b8221e436792ea570badc5455ab3fa22f26569f7f1f12fdad18ae1104dd17de965edaef801b12ee1ef75e86a189396c7b4b9f385234acea9fd"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 7m51.74961655s ago: executing program 36 (id=1279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='rxrpc_peer\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3f7, 0x200, 0x70bd25, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000, @void, @value, @void, @value}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timers\x00') read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0x2020) pread64(r2, &(0x7f0000033240)=""/102384, 0x18ff0, 0x100008) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x1c, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000040), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000490}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x6c, 0x0, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x11c, r8, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6cffa02, 0x12}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xdc, 0xbe, "98feeb26f1624999e0713a2136dc5679a7afe05290be408c00df8141a7e18cf21499a852c49d333d6c5b172f538504f0083ebcfcb0d0902605ba74a89ebc45bcbced22886aa5e26490f7385bcf65ac28399deaf91283027e7e8c39b32ca386d0e32a06cc370fca9eee6e7a4b4e06114ab2db0db80ee45756b659f409bfb6df656cdb2a6e4c3678242c8b8f52374fc35e38615eadf98611a81aa962e1d6d704b8221e436792ea570badc5455ab3fa22f26569f7f1f12fdad18ae1104dd17de965edaef801b12ee1ef75e86a189396c7b4b9f385234acea9fd"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 6m11.481020639s ago: executing program 8 (id=1521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x80002, 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000001c00)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r5, r5, 0x2e, 0x0, 0x0, @void, @value}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) 6m9.022291832s ago: executing program 8 (id=1525): syz_init_net_socket$ax25(0x3, 0x2, 0x1) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x220, 0x43, 0xa0, 0x220, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) 6m6.993089719s ago: executing program 8 (id=1528): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) creat(&(0x7f00000000c0)='./file0\x00', 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x1, 0x3, 0x9, 0xffffffca, 0x5, 0xffffff2b, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x8000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, &(0x7f0000000040)=0x100000001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, 0x0, 0x8) 6m6.037083439s ago: executing program 8 (id=1530): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x9, 0x4e22, 0x9, 0x2, 0x20, 0x0, 0x3a}, {0x9, 0x2, 0x7, 0x9, 0x1, 0x124, 0x7, 0xa9e}, {0x4, 0x3, 0x10, 0x6}, 0x2, 0x6e6bbe, 0x1, 0x0, 0x1}, {{@in6=@private1, 0x4d6, 0x32}, 0x2, @in=@empty, 0x3506, 0x2, 0x1, 0xc, 0x4, 0x6, 0x9e}}, 0xe8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) connect$unix(r4, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) 6m3.792864354s ago: executing program 8 (id=1537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0)=')M', 0x2, 0x0, 0x1000}], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) membarrier(0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80c0}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}]}, 0x34}}, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x5, 0x89}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$isdn(0x22, 0x2, 0x23) r5 = mq_open(&(0x7f0000000540)=',):\x00', 0x40, 0x260, 0x0) lseek(r5, 0xfffffffffffffffd, 0x3) 6m1.732559371s ago: executing program 8 (id=1540): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) socket$inet_dccp(0x2, 0x6, 0x0) memfd_create(&(0x7f0000000040)='\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) 5m45.990347063s ago: executing program 37 (id=1540): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) socket$inet_dccp(0x2, 0x6, 0x0) memfd_create(&(0x7f0000000040)='\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) 3m15.446551879s ago: executing program 7 (id=1805): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f00000000c0)='!selU\xf8\xbe\xd5\xb0[\xa0cJ|H\xd7s/\x8cn\x8cxsen\xae\xff\x00\x00\x00\x00\x00\x00\x00\x000\xf5\x81\x92\xb8\xc2\tS\x10\xa4\xc8', 0x80, 0x4, &(0x7f0000000300)={0x0, 0x7aaa, 0x7}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000340)=""/221, 0xdd, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001a80), 0xa399, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000001d80)={{0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 'syz1\x00', 0x0}) 3m13.226859489s ago: executing program 7 (id=1810): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000480)="60a4a797cb900133ff3ecbb71652f806e73e77374c39d41d9f756d9ce98062822f5d200d95faec24d9d638b727db462b17c66acc0e99c0cd7bd37e53b2f6df33ea3b9bfe8dde3f856c2b7f4e5a99760a10a1acc9dcf005e08cc7e182aa3b8e1eaab588a831bb78668870fa20077eff8cd84433ee8afdd981e0568e3aa745a344e727ef4b035e2c0da0b4a7795bbd4fb3227dd3e7cc6895e121c76dd0f41aae4408", 0xa1, 0xfffffffffffffff8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001a80)=""/102400, 0x12}], 0x1, 0x0, 0x0) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) io_setup(0x5, &(0x7f0000000180)) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r2, 0x29, 0x16, 0x0, &(0x7f0000000940)) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000280)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3m6.97571626s ago: executing program 7 (id=1818): r0 = io_uring_setup(0x253d, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x4) sendto$inet(r2, &(0x7f0000001240)="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", 0xffffffffffffff95, 0x8040841, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) close_range(r0, 0xffffffffffffffff, 0x0) 2m58.760236982s ago: executing program 7 (id=1829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x59}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r3) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000440)}], 0x1) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) 2m57.025645076s ago: executing program 7 (id=1833): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r3) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r6, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) close(r5) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) 2m55.21940605s ago: executing program 7 (id=1836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77"], 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x200000000000008f, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000040), 0x6) r4 = socket(0x23, 0x5, 0x0) listen(r4, 0x0) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) 2m40.195861083s ago: executing program 38 (id=1836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77"], 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x200000000000008f, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000040), 0x6) r4 = socket(0x23, 0x5, 0x0) listen(r4, 0x0) connect$unix(r4, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) 18.531996766s ago: executing program 5 (id=2120): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000180)={0x2, 0xe25, @dev={0xac, 0x14, 0x14, 0xa}}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x1) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) r4 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000100)={r8, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r4, 0x3f72, 0x74f1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) r10 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r10, 0x6a, 0x2, 0x0, &(0x7f00000000c0)=0xfffffffffffffd27) 18.459350148s ago: executing program 0 (id=2122): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 15.78221958s ago: executing program 5 (id=2124): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000001300)='jffs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x400) socket(0x10, 0x80002, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 14.809957602s ago: executing program 3 (id=2127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x49d0, 0x4) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmctl$IPC_RMID(r2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') socket$kcm(0xa, 0x3, 0x3a) socket(0x18, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$pppoe(r3, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r5, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0x8, 0x3, 0x0, 0x9, 0x9}}, {0x4}}]}]}, 0x54}, 0x1, 0x7a00}, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) 14.506208848s ago: executing program 0 (id=2128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x8000, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x59}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r3) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000440)}], 0x1) syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000140)) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) 12.87616971s ago: executing program 0 (id=2130): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000100)="c44060c1d081382bc2cc31ff94e37574", 0x10) listen(r4, 0x0) shutdown(r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140004"], 0x50}}, 0x0) 11.960362359s ago: executing program 6 (id=2132): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x8000000000080001, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x0, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$kcm(0x29, 0x2, 0x0) fsopen(&(0x7f0000000000)='devpts\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x166640, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) creat(&(0x7f00000001c0)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) r1 = syz_io_uring_setup(0x950, &(0x7f0000000600)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x14, 0x4004, @fd_index=0x9, 0x10000, 0x2, 0x2, 0x61bb8bc12b344fa0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 11.596855973s ago: executing program 3 (id=2134): r0 = openat$vmci(0xffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b0, &(0x7f0000001100)={0x0}) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x8) r3 = socket$inet(0x2, 0xa, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x434, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}]}}]}, 0x434}}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_ABS_SETUP(r4, 0x401c5504, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x8000, 0x0) 11.528655713s ago: executing program 6 (id=2135): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x2, 0x1, 0x2}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000340)=""/250, 0x37, 0xfa, 0xc, 0x8, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='mounts\x00') listen(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffff", 0x47}], 0x1) sched_setattr(0x0, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x2000) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x14d802, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000003400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001600)='C', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) dup(r1) 10.90866323s ago: executing program 3 (id=2137): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file1/file4/file7\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000002040)='./bus\x00', 0x4b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x100, 0x1) mknodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') chmod(&(0x7f0000000080)='./file1\x00', 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000004c0)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0) 10.821019865s ago: executing program 6 (id=2138): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003bab90000000000003eb2000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050003"], 0x48}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000180)={0x60, 0xfffffffffffffffe, 0x0, {{0x3, 0xdca, 0x0, 0x1, 0x6, 0xffffffff, 0x7, 0xfffffff7}}}, 0x60) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f000013f000/0x4000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500003000000000002f9078000000ffffffff01800090781200183f2500000000000000000000007f0000017f000001"], 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x80045104, 0x0) 10.767566805s ago: executing program 9 (id=2139): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$usbfs(0x0, 0xb, 0x101301) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0x0) connect$x25(r4, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0xffffff1f, 0x12) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='sit0\x00'}) 8.908514561s ago: executing program 3 (id=2140): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@ipv6_delrule={0x30, 0x21, 0x121, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x18}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6erspan0\x00'}]}, 0x30}}, 0x80c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0xffffffff, 0x80000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/pm_async', 0x101581, 0x100) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8) r3 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0x76}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xc8}}, 0x0) fallocate(r3, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) 8.683547191s ago: executing program 9 (id=2141): r0 = io_uring_setup(0x253d, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006"], 0x84}}, 0x4) sendto$inet(r2, &(0x7f0000001240)="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", 0xffffffffffffff95, 0x8040841, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) close_range(r0, 0xffffffffffffffff, 0x0) 7.884382635s ago: executing program 5 (id=2142): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x47, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) socket(0x2, 0x3, 0xff) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x6) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x20000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f00000002c0)={{0x3, 0x4}, {0x2, 0x2}, 0x1, 0x1, 0x40}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000540)=0x1) 7.091576894s ago: executing program 6 (id=2143): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d0000008500000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create(0x47f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) shutdown(r1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "967cdef875f8738a", "902295394fc6d0b5aa39eb14eac2d9a2", "cabd27f3", "393bedfa875e7d07"}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket(0x10, 0x803, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x1, 0x3, 0x100000001, 0x0, 0x7, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x0, 0x0, 0xdffffffe, 0x1000000000000, 0x7fffffff, 0xffffffffffffffff}, 0x0, 0x0) 6.733179821s ago: executing program 9 (id=2144): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000100000000000010001"], 0x2c, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000000)={0x34, 0x2, 0x4, 0x8000000000000001, "d98da0a1b1744090a8600a10984cafedb24460b1d77f6794bd648682"}) socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}, @RTA_IIF={0x8}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x11) dup(0xffffffffffffffff) 6.628754073s ago: executing program 3 (id=2145): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x8002, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="02", 0x33fe0}], 0x1, 0x0, 0xd9}, 0x44040) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000300)) pipe2$watch_queue(0x0, 0x80) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x56) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffff9c, &(0x7f00000000c0), 0x101003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000001300290a000000000000000007"], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.stat\x00', 0x275a, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000500)={{0x2, 0x4e21, @rand_addr=0x64010101}, {0x1, @remote}, 0x8, {0x2, 0x4e21, @remote}, 'pimreg1\x00'}) r4 = syz_io_uring_setup(0x19d3, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0xff39) 6.493261485s ago: executing program 6 (id=2146): r0 = io_uring_setup(0x30d8, &(0x7f00000001c0)={0x0, 0xd4b1, 0x1000, 0x4000002, 0x212}) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000080), 0xc) read(r1, &(0x7f0000000180)=""/52, 0x34) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8916, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r3, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r9}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1c}}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x10000009}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.345795504s ago: executing program 0 (id=2147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) getsockname$packet(r3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, 0x0, 0x0, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x2b, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) sendmmsg$sock(r2, &(0x7f0000000980)=[{{&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x2, 0x3, {0xa, 0x4e23, 0xfffffff7, @dev={0xfe, 0x80, '\x00', 0x32}, 0x7}}}, 0x80, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="1d96f41696b36181e1ea5414f0690f2fd6dbb98dfe43aa95a233ee1c79d3c6ab79ae2e96063b50a6c5b01d36d218adbdf6feee4a7732", 0x36}], 0x3, &(0x7f0000000380)}}, {{&(0x7f0000000740)=@xdp={0x2c, 0x8, r4, 0xc}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)="3fd2540138b7c79051c990908a79b81146884d5cab4a88b02f70c70658cdf90e1924cbd7bd5768b72049370f8d176369ca4b8d4cb63665fba2eb758d858ed3f64c2c65fd2cac6462e13f6a025240a9bcf599cc0280a65b87fa74b1b383ed9c8e1d8ad119afd2ca3c3b9c6d64ce", 0x6d}], 0x1, &(0x7f0000000900)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x30}}], 0x2, 0x40) socket$inet6(0xa, 0x2, 0x3a) r5 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x6008800, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_emit_ethernet(0x0, 0x0, 0x0) 4.917979663s ago: executing program 9 (id=2148): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x18, 0x14, 0x1, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000000180), 0x400000000000077, 0x0) 4.796183908s ago: executing program 0 (id=2149): openat$ptmx(0xffffffffffffff9c, 0x0, 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100), 0x0, &(0x7f0000000200)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x6, 0x9, &(0x7f0000000080)={{0x2b, @rand_addr=0x8000, 0x0, 0x3, 'wrr\x00'}, {@broadcast, 0x0, 0x2000}}, 0x44) getsockopt$inet_tcp_int(r6, 0x6, 0x9, 0x0, &(0x7f0000000040)) 4.718765675s ago: executing program 5 (id=2150): r0 = io_uring_setup(0x253d, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB], 0x84}}, 0x4) sendto$inet(r2, &(0x7f0000001240)="73c5e3121465ccc3631c8ad1738c6e9e41bcc75f6470caa95f0dad99d34ee5a2d212cab34385b6c4f2655e3df6cd6486285fa20e2bbdf2f3e222437a56d34ead4fd7f83264210eae8b8ac494ebd5e03104b1c22d3afc50e44313e00077ca7b0915fc65b49014842b44258b7cb1e0bd8ca9df5d086067bdd0ad830f927f0ccf9272734d18bbd2c91cf49ae8d838126f5e25696a151c5ed765958bbf09a0073dcbcb9b735bc77116a116c987d38b6b8485156fa6baef39376fbc7b67de5d5cf78059da6c3a960efb3ee35bfdec96840c862b1e62945e85db7423caf62683aac6e954c9ec6636c5feeafc466a9ace88c56c3280fddde04969fd274c22f78bc4f2f32d25c36a0dc42b124f20cf04bcff82131f56fabcf38b203269e29ceae2d27eb28a39a5926b87bd22f246441707170b04084531e3d4152806bfe2dadc17f5167d42e51c220cf8278936865e6f7810136624082c0ce99e8db0a2f3be8a55ae8e4a9b1f80d695b9dbdf5cad7a2176384b0ae9258bed1215cb753715d5cacd87761d43e00d54e5c4631bf9d8b8f2102ef2ea1c4d5134daaf087c666535d72967818aec5f009ef2d56fa83bda48482493f6db67244e6ce068fb127db99793e6bc4f5f962c9174c72603a6631fbef5e67f94d5f00696e997982ba87628876da834d46101182fc1d33e1770e96d5e540bff76041f83ba7d1052df028fd4c02e42dbd80000ec36528b6dfa7f6ddef1199632c27d6d46e60129043eb62620946447c0f3addb3985d558ca99035004ec847ab40959819be7bbb6a25d318479fdd4ba88a1904dd294c1b236715ca88f210ed5677aef26ac85b0d1104a2a6f660ed3ff037b862c071a4071b561f0cc2cc43216c44dd007637fe44760633bed09464e6f5cda1e1cb4d9ce73c9d9bddb9652cc97310e9e7ce5ef3912d7b8453d3d530fc55fdb41c2157fb655e85e93062af920ac0998853baf8c3a9b42bab3bc1bdac0139f2d00d8cdd9de8164943f3708354873a348f93ef335f2db84f6b02972b23d02b51106483e1e52bb60b520425f00bf7f1893faca6c2e4c20aaa4acfba876fe5b48ca42a093de81ef26f3f6cc16a74b99c7eab8051aa7268cc2dcb6fbd4bd4f758eb21c57d9817d1024432112240d2ae954461ecc3dcde35a343fbccf462a6f2f409d5d236e021d81b58c5a78ee13cc5d7ff5d3104bb0750b1c3499a8cb87add3c75aa714ea179375fc229a4b3e6bcbd282179bdd26c30ecc92e7cbd26816a6049576d709acf5ea6b0482558131214d657a61e3634e97ade49bcf999fb67269c1aeaf50849808fc323961eecc9baccb1fd8c5ff4aee216954e2980086c5b44fcf3b5434a5bc8622f476221660373d51f85ea9863163baecf34cdacc540cd202d0eac18cda4c481bb63f9ff089e165c26cf5a02e549a72f901c4dd1b857836ffff00007f5acb0b20218f52df8644f19a9152243166eeffbeeaea3871b063a98d08e92780e5968e6e4c8f683fd6c6c9a3ce0963a222edc319153bccb9499992b65fbdb54837fcfea02272a528292d9a366ea545bde0ddec126f61b81b2f391c5630001569c0479d3be3059ba17899e41edf9545c8eefbec4097b4b249bbdfa2b38bc62ff2d462fc1cd8659638cfbeec915b0deff773f168ac8dc93606cf7e05dbd6070baeb5f70f4ae456f77829c1c448d13c9dd6fd0a49d90c7c64d055db6faccf9a5ff207642f931eb6d2642c4bf7cb131c0b5b9725a0cd8257b10f1fa685acadd37cc63a0a322db5cd09b562a7d86a34de883d71c9865af26e84dd2ddcf02a2247376344d451c8e16057e3457f99e333c087de2ee606a662dc420ffb6104043a2e5efcfe40cc81237f2a707ae6ab1d3151e366731b886af3433f92b288f7cb59e010ace141407e7aca5c0f194a5911cef2b880b465481e4ac71fa1d1a02bf67e38e7e550bf5fdb3863588432d685b61d1ab81b83676d29febfbc977535e859ac91b29ca27078fc64dbd6c46dc8098b08d2e4fb2fa24657501821657efa2e1cd1f86a1365750fe9611924aef4e24a625bcbdb1bfa666d1a6718ef9f43b06e98102ce4b2c0149dbfd52f16af0fc1a6422ee6353c18ca73fb260681a5cc43f2fb6189f415088c0f0cd105ad334141f4eb270fb6df14d2b716c98566a96cd5119a18e42f0dd67ac5b894545d5179daa70f03e8478152653da6aa7960dea9face681e87f42d9ab509fa1d85f2a24738b2fd63e3b48f60b92cc0cdfd4b7f7d4ce97c07f2ddbdb2bc363faa9333c973184b63c0fa0e6547533a424257e6e188507480137171124bc0856aae9da6a6e5c23bbd48a36a4ed4507d4ac671d508e8dc648da0459b9db211d6bab867ff93503ed8b7631034d48a65898d383195205e007e6849bd1a1bf82e4268caf5404b9319319cc216b64bf151887f4a1a3553e811387b6271349b6397a1502003b9673927cf4d2e55f4d3adac5435748878d18eb27432085ed90a9f15e64c61bc3e5164b9d44d085081670670389cd5070b7cb1461dcaf233be6bd7241c9c6dc0fd8f6b301de3d7b6ba2d172053d135f824b22ce88676aa62da4ee682f85b5c7ddd8c2aa1c6e1852ae28c523b828c52cf941249cce55fd0e0a9ee9992e7e28dd7b3ad2756b71d5b90304f9a3c65ede175", 0xffffffffffffff95, 0x8040841, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) close_range(r0, 0xffffffffffffffff, 0x0) 2.447837171s ago: executing program 9 (id=2151): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)={0x48, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xd0fa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x23) mkdir(0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f000000be00)={0x34, r7, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r5, 0x0, 0x20000001) r8 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000004d00), 0x0, 0x4) recvmmsg$unix(r8, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x1}}], 0x1, 0x5fcf2bd0b4a14a6, 0x0) sendmsg$kcm(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)="5ff2119d05be5815582a6053", 0xc}], 0x1}, 0x0) r9 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x1, 0x24, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') 2.438849694s ago: executing program 0 (id=2152): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000040)=@id, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/keycreate\x00') r5 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0) 2.226434244s ago: executing program 3 (id=2153): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r4, 0x1, 0x10000000000009, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000380)={0xa, 0xfffe, 0x4, @remote, 0x9}, 0x1c) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, &(0x7f0000000180)) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) 2.225805274s ago: executing program 5 (id=2154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x59}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r3) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000440)}], 0x1) syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000140)) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) 710.50955ms ago: executing program 5 (id=2155): r0 = io_uring_setup(0x253d, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a0000"], 0x84}}, 0x4) sendto$inet(r2, &(0x7f0000001240)="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", 0xffffffffffffff95, 0x8040841, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) close_range(r0, 0xffffffffffffffff, 0x0) 333.927646ms ago: executing program 6 (id=2156): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2, 0x18, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}}]}, 0x78}}, 0x0) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) close(r1) r7 = semget(0x3, 0x2, 0x6c5) semctl$IPC_RMID(r7, 0x0, 0x0) 0s ago: executing program 9 (id=2157): r0 = syz_io_uring_setup(0x237, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1f, 0x0, &(0x7f0000000900)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f00000001c0)=0x8, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000200)={r9, @in={{0x2, 0x4e23, @empty}}, 0x3}, 0x90) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000940)={0x424, 0x3f4, 0x0, 0x70bd27, 0x25dfdbfc, {0x0, 0x2, 0x2f, [0x95ee, 0xe53, 0x3, 0x10000, 0x8, 0x9, 0x7fffffff, 0x1, 0x0, 0x410c, 0x1, 0x1, 0x72, 0x3, 0x800, 0x3, 0x9, 0xfff, 0x6, 0xfffffffb, 0x800, 0x2, 0x10, 0xf218, 0x40, 0xb7, 0x9, 0x4, 0x3, 0xfff, 0x8, 0x3947671e, 0x8, 0xfffffffb, 0x7ff, 0x10, 0x3, 0x3ff, 0x0, 0x597, 0x1, 0x0, 0x1c, 0x1, 0x7, 0x8, 0x10, 0x6bb5d70c, 0x9, 0x3, 0x9, 0x5, 0x8, 0xfffffff7, 0xffff, 0x4, 0x2, 0xe14a, 0x2, 0xfffffffa, 0x1, 0x8000, 0x4], [0x5, 0x8c6, 0x6, 0x9, 0x1, 0x509c, 0x401, 0x101, 0x4357, 0x3, 0x8, 0xc000, 0x3, 0x101460bb, 0x5, 0x672, 0x6, 0xee, 0x8, 0x2, 0x6, 0x3, 0x100, 0x3, 0x3, 0x80000001, 0x10, 0xcfa2, 0x3, 0x10001, 0x3ff, 0x80000000, 0x4, 0xc, 0x4, 0x8000, 0x800, 0x3, 0xfffffffd, 0x400, 0x1, 0x4ef7, 0x100, 0x3432, 0xc, 0x13, 0x401, 0x7fffffff, 0x3, 0x1, 0x4, 0x7f, 0x5, 0x3, 0x8, 0x1c6, 0x0, 0x7, 0x4, 0x5, 0x8000, 0xc3, 0xf, 0x6], [0x5, 0x1, 0x5, 0xb, 0x1000, 0x80000001, 0x8, 0x7, 0x1006, 0x5, 0x6, 0x400, 0xd, 0x2, 0x8000, 0x0, 0x3, 0x101, 0x3, 0xfff, 0x9, 0x3, 0x0, 0x9, 0x7, 0x7, 0xffff, 0x40000000, 0x1, 0x1, 0x3a3, 0x9, 0xf, 0x3, 0xfffffffb, 0x4, 0x0, 0x9, 0x4d67283, 0x3, 0x522, 0x2, 0x9, 0x4, 0x1, 0x3, 0x1, 0x7, 0x3, 0x2, 0x9, 0xbcd5, 0x101, 0x49, 0x200, 0x51d, 0x1, 0x7ff, 0x936, 0x7, 0x6, 0xec, 0x335, 0x7ff], [0x401, 0x8, 0x2, 0x4, 0x7, 0x7f, 0x84, 0xffffffff, 0xd, 0x4, 0x2, 0x7, 0x4, 0x45, 0x1, 0x1dc, 0xfffff628, 0x4, 0x100, 0xf6e, 0x3, 0x48c0f481, 0x2, 0x2, 0x2, 0x5, 0x7ff, 0xf, 0x3, 0x8001, 0x1, 0x220, 0xfffff000, 0xfffffff8, 0x200, 0xd, 0x3a6a8732, 0x10000, 0xfffffffd, 0x0, 0x90000000, 0x1, 0x800, 0x8000, 0xb2, 0x6e1f, 0x3, 0x4, 0x10, 0xe, 0xffff, 0x6, 0xf52f, 0x1, 0x40, 0xb38e, 0x7, 0x1, 0x6, 0x4c2, 0x1000, 0x7, 0x7, 0x8], 0x2, ['U\x00']}, ["", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x840}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f00000000c0)={r9, 0x8001}, 0x8) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0x7ffc0000 [ 427.944701][ T9005] 9pnet_virtio: no channels available for device syz [ 427.952089][ T29] audit: type=1326 audit(1736304653.042:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8996 comm="syz.5.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e18185d29 code=0x7ffc0000 [ 427.973513][ T29] audit: type=1326 audit(1736304653.042:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8996 comm="syz.5.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e18185d29 code=0x7ffc0000 [ 427.997676][ T29] audit: type=1326 audit(1736304653.042:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8996 comm="syz.5.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f6e18185d29 code=0x7ffc0000 [ 428.019123][ T29] audit: type=1326 audit(1736304653.042:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8996 comm="syz.5.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e18185d29 code=0x7ffc0000 [ 428.040720][ T29] audit: type=1326 audit(1736304653.042:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8996 comm="syz.5.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e18185d29 code=0x7ffc0000 [ 428.215271][ T29] audit: type=1326 audit(1736304653.052:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8996 comm="syz.5.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6e18185d29 code=0x7ffc0000 [ 428.237076][ T29] audit: type=1326 audit(1736304653.052:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8996 comm="syz.5.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e18185d29 code=0x7ffc0000 [ 431.506525][ T9036] batman_adv: batadv0: Adding interface: gretap1 [ 431.654461][ T9036] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.704559][ T9036] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 432.224517][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 434.185446][ T9062] vlan2: entered promiscuous mode [ 434.223198][ T9062] bridge0: entered promiscuous mode [ 435.200427][ T9062] team0: Port device vlan2 added [ 435.264562][ T5822] Bluetooth: hci5: command 0x0405 tx timeout [ 439.454748][ T9118] xt_connbytes: Forcing CT accounting to be enabled [ 439.461389][ T9118] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 439.473093][ T9118] xt_bpf: check failed: parse error [ 440.609606][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.166232][ T9155] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.374492][ T7421] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 444.103476][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 444.136802][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 444.149206][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 444.180739][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 444.254816][ T5822] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 444.262310][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 444.281497][ T7421] usb 7-1: unable to get BOS descriptor or descriptor too short [ 444.294015][ T7421] usb 7-1: no configurations [ 444.299112][ T7421] usb 7-1: can't read configurations, error -22 [ 445.848535][ T9193] dlm: no local IP address has been set [ 445.854683][ T9193] dlm: cannot start dlm midcomms -107 [ 446.255694][ T9162] chnl_net:caif_netlink_parms(): no params data found [ 446.304568][ T5830] Bluetooth: hci0: command tx timeout [ 447.423075][ T9210] block device autoloading is deprecated and will be removed. [ 448.417819][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 448.424104][ T5830] Bluetooth: hci0: command tx timeout [ 448.822669][ T9216] netlink: 28 bytes leftover after parsing attributes in process `syz.7.745'. [ 448.832201][ T9216] netlink: 28 bytes leftover after parsing attributes in process `syz.7.745'. [ 448.853753][ T9216] ip6gretap0: entered promiscuous mode [ 448.885699][ T9216] batadv_slave_1: entered promiscuous mode [ 448.905937][ T9216] netlink: 28 bytes leftover after parsing attributes in process `syz.7.745'. [ 448.915127][ T9216] netlink: 28 bytes leftover after parsing attributes in process `syz.7.745'. [ 449.034541][ T9162] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.050142][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.081712][ T9162] bridge_slave_0: entered allmulticast mode [ 449.124679][ T9162] bridge_slave_0: entered promiscuous mode [ 449.133249][ T9162] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.140684][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.149247][ T9162] bridge_slave_1: entered allmulticast mode [ 449.156685][ T9162] bridge_slave_1: entered promiscuous mode [ 450.396502][ T9162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.467243][ T5822] Bluetooth: hci0: command tx timeout [ 450.478954][ T9162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.349124][ T9162] team0: Port device team_slave_0 added [ 451.400865][ T9162] team0: Port device team_slave_1 added [ 451.468731][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.298633][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.024408][ T9162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.120712][ T5822] Bluetooth: hci0: command tx timeout [ 453.702784][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.710297][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.714153][ T9235] syz.2.750 (9235): drop_caches: 2 [ 453.759707][ T9162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.897470][ T9162] hsr_slave_0: entered promiscuous mode [ 453.939247][ T9162] hsr_slave_1: entered promiscuous mode [ 453.980144][ T9162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.035328][ T9162] Cannot create hsr debugfs directory [ 454.111367][ T9259] netlink: 'syz.7.756': attribute type 39 has an invalid length. [ 457.613868][ T9162] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 457.713817][ T9162] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 457.947395][ T9162] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 458.064175][ T9162] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 458.268803][ T9162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.285393][ T9162] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.316984][ T9162] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 458.327508][ T9162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 458.355073][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.362474][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.375756][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.383067][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.280332][ T9162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.074659][ T5830] Bluetooth: hci5: command 0x0405 tx timeout [ 463.218657][ T9162] veth0_vlan: entered promiscuous mode [ 463.398977][ T9162] veth1_vlan: entered promiscuous mode [ 463.599102][ T9162] veth0_macvtap: entered promiscuous mode [ 463.749140][ T9162] veth1_macvtap: entered promiscuous mode [ 463.949506][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.960371][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.970638][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.981419][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.991878][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.003089][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.013611][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.024517][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.042913][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.071220][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.082183][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.224237][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.254947][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.324115][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.398722][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.436022][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.666891][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.690386][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.734909][ T9162] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.746849][ T9162] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.755848][ T9162] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.655584][ T9162] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.737101][ T9381] syz.5.776: attempt to access beyond end of device [ 467.737101][ T9381] loop5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 467.811799][ T6741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.354149][ T9381] syz.5.776: attempt to access beyond end of device [ 468.354149][ T9381] loop5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 468.747043][ T6741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.759771][ T9381] Mount JFS Failure: -5 [ 468.787684][ T9381] jfs_mount failed w/return code = -5 [ 468.952498][ T8477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.966580][ T8477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.071679][ T9391] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 470.117907][ T9391] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 471.040908][ T9404] ax25_connect(): syz.7.782 uses autobind, please contact jreuter@yaina.de [ 471.168010][ T9413] netlink: 28 bytes leftover after parsing attributes in process `syz.7.782'. [ 471.183740][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.7.782'. [ 471.192712][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.7.782'. [ 471.617815][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.781'. [ 472.084537][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 472.084557][ T29] audit: type=1107 audit(1736304697.882:67): pid=9405 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 477.366020][ T9461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.476730][ T9501] trusted_key: encrypted_key: insufficient parameters specified [ 480.722880][ T9503] trusted_key: encrypted_key: insufficient parameters specified [ 483.376005][ T9515] Falling back ldisc for ttyprintk. [ 484.227566][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 484.667276][ T9530] vlan3: entered promiscuous mode [ 484.672555][ T9530] vlan3: entered allmulticast mode [ 484.678464][ T9530] hsr_slave_1: entered allmulticast mode [ 484.754590][ T5835] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 484.838324][ T9544] netlink: 36 bytes leftover after parsing attributes in process `syz.8.809'. [ 485.033286][ T9544] netlink: 16 bytes leftover after parsing attributes in process `syz.8.809'. [ 485.958014][ T9544] netlink: 36 bytes leftover after parsing attributes in process `syz.8.809'. [ 486.018252][ T9544] netlink: 36 bytes leftover after parsing attributes in process `syz.8.809'. [ 486.140656][ T9559] can0: slcan on ttyS3. [ 486.579334][ T9559] can0 (unregistered): slcan off ttyS3. [ 486.697140][ T9552] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 486.819026][ T9552] kvm: pic: level sensitive irq not supported [ 486.819377][ T9552] kvm: pic: non byte read [ 486.959948][ T9552] kvm: pic: level sensitive irq not supported [ 486.960011][ T9552] kvm: pic: non byte read [ 487.041283][ T9552] kvm: pic: level sensitive irq not supported [ 487.041354][ T9552] kvm: pic: non byte read [ 487.192568][ T9552] kvm: pic: level sensitive irq not supported [ 487.193365][ T9552] kvm: pic: non byte read [ 490.406064][ T9610] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 490.413025][ T9610] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 490.423952][ T9610] vhci_hcd vhci_hcd.0: Device attached [ 490.431312][ T9612] vhci_hcd: connection closed [ 490.469772][ T81] vhci_hcd: stop threads [ 490.485499][ T81] vhci_hcd: release socket [ 490.630476][ T81] vhci_hcd: disconnect device [ 491.416803][ T9624] Unsupported ieee802154 address type: 0 [ 492.782111][ T6741] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.837942][ T6741] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.566355][ T6741] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.591019][ T6741] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.445648][ T9654] netlink: 'syz.6.832': attribute type 10 has an invalid length. [ 496.778245][ T6741] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.788784][ T6741] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.933085][ T9703] netlink: 164 bytes leftover after parsing attributes in process `syz.6.832'. [ 498.963598][ T9654] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 499.434557][ T9732] o2cb: This node has not been configured. [ 499.440463][ T9732] o2cb: Cluster check failed. Fix errors before retrying. [ 499.447727][ T9732] (syz.5.838,9732,0):user_dlm_register:674 ERROR: status = -22 [ 499.455354][ T9732] (syz.5.838,9732,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 501.368453][ T6741] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.379176][ T6741] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.472051][ T9751] tipc: Started in network mode [ 501.478457][ T9751] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 501.525223][ T9751] tipc: Enabled bearer , priority 0 [ 501.549641][ T9748] netlink: 36 bytes leftover after parsing attributes in process `syz.7.843'. [ 501.579583][ T9748] netlink: 16 bytes leftover after parsing attributes in process `syz.7.843'. [ 501.615120][ T9748] netlink: 36 bytes leftover after parsing attributes in process `syz.7.843'. [ 501.665102][ T9748] netlink: 36 bytes leftover after parsing attributes in process `syz.7.843'. [ 501.722169][ T6741] bridge_slave_1: left allmulticast mode [ 501.732024][ T6741] bridge_slave_1: left promiscuous mode [ 501.752356][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.756700][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.784140][ T6741] bridge_slave_0: left allmulticast mode [ 501.793629][ T6741] bridge_slave_0: left promiscuous mode [ 501.824437][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.934404][ T7421] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 502.065440][ T7421] usb 3-1: device descriptor read/64, error -71 [ 502.647123][ T7390] tipc: Node number set to 11578026 [ 502.986340][ T7421] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 503.070674][ T5835] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 503.654421][ T7421] usb 3-1: device descriptor read/64, error -71 [ 503.765103][ T7421] usb usb3-port1: attempt power cycle [ 504.865934][ T7421] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 505.014647][ T7421] usb 3-1: device descriptor read/8, error -71 [ 505.288486][ T9784] xt_bpf: check failed: parse error [ 505.294937][ T7421] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 505.305483][ T9784] syz.6.853: attempt to access beyond end of device [ 505.305483][ T9784] nbd6: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 505.353251][ T7421] usb 3-1: device descriptor read/8, error -71 [ 505.357773][ T6741] team0: Port device vxlan0 removed [ 505.466440][ T7421] usb usb3-port1: unable to enumerate USB device [ 506.344464][ T7417] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 507.339519][ T6741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.370361][ T6741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.396664][ T7417] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.416965][ T7417] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.428334][ T7417] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 507.432583][ T6741] bond0 (unregistering): Released all slaves [ 507.437981][ T7417] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 507.454158][ T7417] usb 9-1: SerialNumber: syz [ 507.568299][ T9799] netlink: 16 bytes leftover after parsing attributes in process `syz.6.856'. [ 507.611136][ T9804] tipc: Enabling of bearer rejected, failed to enable media [ 507.641331][ T6741] tipc: Left network mode [ 509.410054][ T7417] usb 9-1: 0:2 : does not exist [ 509.415126][ T7417] usb 9-1: unit 255 not found! [ 509.432093][ T7417] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5) [ 509.475519][ T7417] usb 9-1: USB disconnect, device number 2 [ 509.906137][ T6439] udevd[6439]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.488489][ T9853] dccp_close: ABORT with 50 bytes unread [ 513.757648][ T6741] hsr_slave_0: left promiscuous mode [ 515.524468][ T6741] hsr_slave_1: left promiscuous mode [ 515.530437][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.564448][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.586341][ T6741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.593905][ T6741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.133417][ T9860] binder: 9858:9860 ioctl c0306201 20000680 returned -14 [ 516.863273][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.8.877'. [ 516.896622][ T6741] veth1_macvtap: left promiscuous mode [ 516.902175][ T6741] veth0_macvtap: left promiscuous mode [ 516.907881][ T6741] veth1_vlan: left promiscuous mode [ 516.913243][ T6741] veth0_vlan: left promiscuous mode [ 520.105524][ T6741] team0 (unregistering): Port device team_slave_1 removed [ 520.189088][ T6741] team0 (unregistering): Port device team_slave_0 removed [ 520.894543][ T9887] macvlan1: entered promiscuous mode [ 520.902110][ T9887] macvlan1: entered allmulticast mode [ 520.910276][ T9887] veth1_vlan: entered allmulticast mode [ 520.931112][ T9888] veth1_vlan: left allmulticast mode [ 520.954634][ T9898] tipc: Started in network mode [ 520.959538][ T9898] tipc: Node identity 10000, cluster identity 4711 [ 520.966178][ T9898] tipc: Node number set to 65536 [ 522.687756][ T9940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.025565][ T9936] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 524.313793][ T9961] i2c i2c-0: Invalid block write size 34 [ 525.554512][ T9971] netlink: 194488 bytes leftover after parsing attributes in process `syz.6.891'. [ 527.250217][ T9970] xt_connbytes: Forcing CT accounting to be enabled [ 527.292371][ T9970] Cannot find set identified by id 0 to match [ 527.334907][ T9980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.892'. [ 527.379167][ T9980] xfrm1: entered promiscuous mode [ 527.427390][ T9980] xfrm1: entered allmulticast mode [ 527.672595][ T9984] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 528.562725][ T6741] IPVS: stop unused estimator thread 0... [ 531.356260][T10010] netlink: 36 bytes leftover after parsing attributes in process `syz.7.900'. [ 532.200527][T10010] netlink: 16 bytes leftover after parsing attributes in process `syz.7.900'. [ 532.209551][T10010] netlink: 36 bytes leftover after parsing attributes in process `syz.7.900'. [ 532.315163][T10010] netlink: 36 bytes leftover after parsing attributes in process `syz.7.900'. [ 539.003265][T10074] vlan2: entered promiscuous mode [ 539.009521][T10074] nlmon0: entered promiscuous mode [ 539.017525][T10074] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 539.288096][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 539.358232][T10083] netlink: 36 bytes leftover after parsing attributes in process `syz.6.916'. [ 539.393652][T10083] netlink: 16 bytes leftover after parsing attributes in process `syz.6.916'. [ 539.446685][T10083] netlink: 36 bytes leftover after parsing attributes in process `syz.6.916'. [ 540.404607][T10083] netlink: 36 bytes leftover after parsing attributes in process `syz.6.916'. [ 545.002755][T10143] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 547.445464][T10181] netlink: 'syz.2.933': attribute type 10 has an invalid length. [ 547.465261][T10181] netlink: 40 bytes leftover after parsing attributes in process `syz.2.933'. [ 547.558096][T10181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.584465][T10181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.611412][T10181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.713934][T10181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.160342][T10181] team0: Port device geneve0 added [ 548.505139][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.941'. [ 549.682145][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.940'. [ 553.154647][T10244] TCP: out of memory -- consider tuning tcp_mem [ 559.578835][T10320] netlink: 36 bytes leftover after parsing attributes in process `syz.7.962'. [ 559.588967][T10320] netlink: 16 bytes leftover after parsing attributes in process `syz.7.962'. [ 560.573273][T10320] netlink: 36 bytes leftover after parsing attributes in process `syz.7.962'. [ 561.279343][T10320] netlink: 36 bytes leftover after parsing attributes in process `syz.7.962'. [ 563.384825][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.467574][T10370] 9pnet_fd: Insufficient options for proto=fd [ 565.814084][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 565.893999][T10379] netlink: 36 bytes leftover after parsing attributes in process `syz.5.976'. [ 565.914437][T10379] netlink: 16 bytes leftover after parsing attributes in process `syz.5.976'. [ 565.923649][T10379] netlink: 36 bytes leftover after parsing attributes in process `syz.5.976'. [ 566.601868][T10379] netlink: 36 bytes leftover after parsing attributes in process `syz.5.976'. [ 569.235364][T10405] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 570.169364][T10418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 570.285356][T10418] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 570.465210][ T5835] Bluetooth: hci0: command 0x0405 tx timeout [ 572.366799][T10440] netlink: 36 bytes leftover after parsing attributes in process `syz.6.987'. [ 572.451567][T10440] netlink: 16 bytes leftover after parsing attributes in process `syz.6.987'. [ 572.573589][ T5835] Bluetooth: hci0: command 0x0405 tx timeout [ 572.657599][T10440] netlink: 36 bytes leftover after parsing attributes in process `syz.6.987'. [ 572.689713][T10440] netlink: 36 bytes leftover after parsing attributes in process `syz.6.987'. [ 573.596254][T10458] netlink: ct family unspecified [ 573.601355][T10458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.406489][T10459] ebt_among: src integrity fail: 300 [ 579.312725][ T7424] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 580.183441][ T7424] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 580.191450][ T7424] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 580.604344][ T7424] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 580.614295][ T7424] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 580.625530][ T7424] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 580.709989][ T7424] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 580.717901][ T7424] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 580.728193][ T7424] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 580.738446][ T7424] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 580.750185][ T7424] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 580.820074][ T7424] usb 7-1: unable to read config index 2 descriptor/start: -71 [ 580.827801][ T7424] usb 7-1: can't read configurations, error -71 [ 581.302234][T10521] warning: `syz.6.1004' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 585.699815][T10544] netlink: 'syz.7.1009': attribute type 29 has an invalid length. [ 585.719956][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1009'. [ 588.126773][T10585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1016'. [ 588.269653][T10585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1016'. [ 588.413295][T10585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1016'. [ 588.647361][T10585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1016'. [ 588.706847][T10588] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 591.641201][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 591.718440][T10630] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1028'. [ 591.791472][T10630] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1028'. [ 591.871934][T10630] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1028'. [ 591.939300][T10630] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1028'. [ 593.587160][ T5901] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 594.672565][ T5901] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.688668][ T5901] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.721227][ T5901] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.850842][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.929684][ T5901] usb 9-1: Product: syz [ 594.975234][ T5901] usb 9-1: Manufacturer: syz [ 595.105477][ T5901] usb 9-1: SerialNumber: syz [ 596.066282][ T5901] usb 9-1: 0:2 : does not exist [ 596.262662][ T5901] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 596.677827][ T5901] usb 9-1: USB disconnect, device number 3 [ 598.104524][ T6439] udevd[6439]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 601.238475][T10695] netlink: 188 bytes leftover after parsing attributes in process `syz.7.1046'. [ 601.251704][T10702] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1048'. [ 601.275310][T10702] batadv0: entered promiscuous mode [ 601.281628][T10702] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 601.292845][T10702] batadv0: left promiscuous mode [ 601.297413][T10695] netlink: 'syz.7.1046': attribute type 1 has an invalid length. [ 601.380783][ T5835] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 602.282540][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1054'. [ 603.593576][ T5835] Bluetooth: hci0: command 0x0405 tx timeout [ 604.148923][T10733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1058'. [ 605.026093][T10746] vxcan1: entered allmulticast mode [ 605.038359][T10749] vxcan1: left allmulticast mode [ 608.897484][ T5822] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 613.864424][T10826] team0: MTU too low for tipc bearer [ 613.877292][T10826] tipc: Disabling bearer [ 616.249764][T10850] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (128) [ 616.263962][T10845] random: crng reseeded on system resumption [ 616.426024][T10850] program syz.5.1083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.678048][T10876] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1087'. [ 618.689821][T10876] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1087'. [ 619.668128][T10887] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 619.694919][T10887] CIFS mount error: No usable UNC path provided in device string! [ 619.694919][T10887] [ 619.708754][T10887] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 620.290266][T10885] delete_channel: no stack [ 620.541387][T10899] ALSA: mixer_oss: invalid OSS volume '' [ 621.379066][T10900] vlan2: entered promiscuous mode [ 621.384609][T10900] vlan2: entered allmulticast mode [ 621.390089][T10900] hsr_slave_1: entered allmulticast mode [ 622.547728][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1095'. [ 622.777042][T10913] block device autoloading is deprecated and will be removed. [ 622.785784][T10913] syz.7.1097: attempt to access beyond end of device [ 622.785784][T10913] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 623.158083][T10904] hsr_slave_1 (unregistering): left allmulticast mode [ 623.376517][T10904] hsr_slave_1 (unregistering): left promiscuous mode [ 625.756507][T10932] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 627.061400][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.691014][ T5901] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 627.888111][T10957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.905377][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 627.966775][ T5901] usb 3-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice= 0.90 [ 628.042963][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.097411][ T5901] r8152-cfgselector 3-1: Unknown version 0x0000 [ 628.104346][ T5901] r8152-cfgselector 3-1: config 0 descriptor?? [ 628.126277][T10957] batadv_slave_0: entered promiscuous mode [ 628.156719][ T5901] r8152 3-1:0.0: Expected endpoints are not found [ 629.343562][T10956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.353177][T10956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.363056][T10956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.372031][T10956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.805099][ T5902] r8152-cfgselector 3-1: USB disconnect, device number 10 [ 637.565862][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 638.927535][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1131'. [ 639.306772][T11068] Illegal XDP return value 2081577472 on prog (id 280) dev N/A, expect packet loss! [ 645.209680][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 648.315657][T11161] xt_TCPMSS: Only works on TCP SYN packets [ 656.143275][T11245] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 656.151134][T11245] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1165'. [ 656.221929][ T29] audit: type=1326 audit(1736304879.051:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.6.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 656.259748][ T29] audit: type=1326 audit(1736304879.051:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.6.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 656.281567][ T29] audit: type=1326 audit(1736304879.051:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.6.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 656.303251][ T29] audit: type=1326 audit(1736304879.051:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.6.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 656.324992][ T29] audit: type=1326 audit(1736304879.051:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.6.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 656.346917][ T29] audit: type=1326 audit(1736304879.051:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.6.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 656.378041][ T29] audit: type=1326 audit(1736304879.051:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.6.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 656.408481][T11252] 9pnet_fd: Insufficient options for proto=fd [ 656.450978][ T29] audit: type=1326 audit(1736304879.051:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11244 comm="syz.6.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 656.494987][T11250] zonefs (nullb0) ERROR: Not a zoned block device [ 668.439377][T11359] tty tty30: ldisc open failed (-12), clearing slot 29 [ 668.681335][T11357] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 671.368784][T11386] bridge_slave_0: left allmulticast mode [ 671.368814][T11386] bridge_slave_0: left promiscuous mode [ 671.369223][T11386] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.673910][T11386] bridge_slave_1: left allmulticast mode [ 673.681270][T11386] bridge_slave_1: left promiscuous mode [ 673.705529][T11386] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.733395][T11386] bond0: (slave bond_slave_0): Releasing backup interface [ 679.148013][T11386] bond0: (slave bond_slave_1): Releasing backup interface [ 679.187183][T11386] team0: Port device team_slave_0 removed [ 679.199204][T11386] team0: Port device team_slave_1 removed [ 679.205647][T11386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.215081][T11386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.222621][T11386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.245340][T11392] team0: Mode changed to "loadbalance" [ 679.751400][T11435] syz.5.1201: attempt to access beyond end of device [ 679.751400][T11435] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 680.846233][T11440] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1202'. [ 684.312865][T11466] binder_alloc: 11465: binder_alloc_buf, no vma [ 687.976343][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.997660][ T9] libceph: connect (1)[c::]:6789 error -101 [ 689.004533][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 689.073400][T11531] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 689.298713][T11518] ceph: No mds server is up or the cluster is laggy [ 689.331047][ T9] libceph: connect (1)[c::]:6789 error -101 [ 689.340364][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 696.316546][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 696.331886][T11608] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1232'. [ 696.348903][T11608] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1232'. [ 696.387657][T11608] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1232'. [ 696.422188][T11608] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1232'. [ 697.686922][T11633] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1241'. [ 698.466938][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 698.503688][T11632] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1242'. [ 698.512678][T11632] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1242'. [ 698.550903][T11632] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1242'. [ 698.707410][T11632] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1242'. [ 698.853563][T11649] xt_CONNSECMARK: invalid mode: 0 [ 700.631772][T11665] overlayfs: refusing to follow metacopy origin for (/file0) [ 702.906401][T11687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.935962][ T7423] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 704.990402][ T7423] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 708.247879][ T29] audit: type=1326 audit(1736304933.400:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11713 comm="syz.6.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 708.814360][ T29] audit: type=1326 audit(1736304934.229:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11713 comm="syz.6.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 709.797285][ T29] audit: type=1326 audit(1736304934.229:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11713 comm="syz.6.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 709.819287][ T29] audit: type=1326 audit(1736304934.229:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11713 comm="syz.6.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 713.323923][T11749] wlan1: mtu less than device minimum [ 715.339797][T11774] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1266'. [ 715.372263][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 715.400060][T11774] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1266'. [ 715.415720][T11774] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1266'. [ 715.424803][T11774] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1266'. [ 715.532535][T11758] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1268'. [ 715.544099][T11758] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1268'. [ 715.929983][T11758] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1268'. [ 715.989953][T11758] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1268'. [ 720.842671][T11837] batman_adv: batadv0: Adding interface: vxlan0 [ 720.852297][T11837] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.888328][T11837] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 721.954563][T11854] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1286'. [ 722.133402][T11854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1286'. [ 722.174158][T11854] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1286'. [ 722.222232][T11854] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1286'. [ 729.716158][T11911] random: crng reseeded on system resumption [ 731.814465][T11946] loop7: detected capacity change from 0 to 16384 [ 731.995731][T11953] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 735.156426][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 735.339258][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 735.683409][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 735.870652][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 735.886665][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 735.894020][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 737.637884][T11978] chnl_net:caif_netlink_parms(): no params data found [ 737.952060][ T5830] Bluetooth: hci3: command tx timeout [ 737.978345][T12021] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1314'. [ 737.987465][T12021] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1314'. [ 737.997051][T12021] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1314'. [ 738.559328][T12021] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1314'. [ 740.139018][ T5822] Bluetooth: hci3: command tx timeout [ 740.620047][T11978] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.671343][T11978] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.720260][T11978] bridge_slave_0: entered allmulticast mode [ 740.727290][T11978] bridge_slave_0: entered promiscuous mode [ 740.763863][T11978] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.771505][T11978] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.780119][T11978] bridge_slave_1: entered allmulticast mode [ 740.804470][T11978] bridge_slave_1: entered promiscuous mode [ 741.651972][ T29] audit: type=1326 audit(1736304968.618:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.8.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0f785d29 code=0x7ffc0000 [ 741.689670][T11978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.755984][T12062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 741.964310][ T29] audit: type=1326 audit(1736304968.764:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.8.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f4b0f785d29 code=0x7ffc0000 [ 742.250185][ T29] audit: type=1326 audit(1736304969.331:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.8.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0f785d29 code=0x7ffc0000 [ 742.324141][ T29] audit: type=1326 audit(1736304969.331:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.8.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0f785d29 code=0x7ffc0000 [ 742.350637][ T5822] Bluetooth: hci3: command tx timeout [ 742.380328][T11978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.480159][ T29] audit: type=1326 audit(1736304969.405:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12061 comm="syz.6.1323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x0 [ 742.501311][ T29] audit: type=1326 audit(1736304969.405:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.8.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4b0f785d29 code=0x7ffc0000 [ 742.524809][ T29] audit: type=1326 audit(1736304969.405:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.8.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0f785d29 code=0x7ffc0000 [ 742.546404][ T29] audit: type=1326 audit(1736304969.405:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.8.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0f785d29 code=0x7ffc0000 [ 742.569116][ T29] audit: type=1326 audit(1736304969.405:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.8.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f4b0f785d29 code=0x7ffc0000 [ 742.591075][ T29] audit: type=1326 audit(1736304969.405:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12050 comm="syz.8.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b0f785d29 code=0x7ffc0000 [ 742.670714][T11978] team0: Port device team_slave_0 added [ 742.696926][T11978] team0: Port device team_slave_1 added [ 742.828830][T11978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.850919][T11978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.890828][T11978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.909858][T11978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.926867][T11978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.954893][T11978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.282123][ T5822] Bluetooth: hci3: command tx timeout [ 744.303827][T12074] fuse: Bad value for 'fd' [ 744.577060][T11978] hsr_slave_0: entered promiscuous mode [ 744.588317][T12092] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1327'. [ 744.636267][T12092] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1327'. [ 744.659421][T11978] hsr_slave_1: entered promiscuous mode [ 744.718836][T12092] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1327'. [ 744.761262][T12092] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1327'. [ 747.058458][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.859932][ T5822] Bluetooth: hci1: unexpected event for opcode 0xdc38 [ 749.464689][T11978] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 749.510003][T11978] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 750.867327][T11978] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 750.904726][T11978] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 752.049050][ T5822] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 752.057744][ T5822] Bluetooth: hci1: Injecting HCI hardware error event [ 752.068164][ T5822] Bluetooth: hci1: hardware error 0x00 [ 752.422079][T11978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.446134][T11978] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.486153][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.493342][ T8480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.509139][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.516333][ T8480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.526970][T12164] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1342'. [ 752.543644][T12164] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1342'. [ 752.640263][T12164] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1342'. [ 752.732562][T11978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 752.743093][T11978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 752.759163][T12164] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1342'. [ 754.408460][ T5822] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 755.198646][T11978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.411814][T11978] veth0_vlan: entered promiscuous mode [ 758.562120][T11978] veth1_vlan: entered promiscuous mode [ 758.749585][T11978] veth0_macvtap: entered promiscuous mode [ 758.769666][T11978] veth1_macvtap: entered promiscuous mode [ 758.838921][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.891022][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.900980][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.911453][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.921376][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.932200][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.943707][T11978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.956878][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.967446][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.977314][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 758.987826][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.997844][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.008333][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.019141][T11978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.054464][T11978] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.071690][T11978] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.080432][T11978] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.089210][T11978] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.642757][ T4592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.748967][ T9714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.768309][ T9714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.776459][ T4592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.932002][T12264] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1357'. [ 759.994173][T12264] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1357'. [ 760.011925][T12264] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1357'. [ 760.052143][T12264] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1357'. [ 762.314897][T12298] xt_socket: unknown flags 0x4 [ 767.286297][ T5830] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 770.565980][T12389] openvswitch: netlink: Missing valid actions attribute. [ 770.573079][T12389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.469301][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 773.720899][ T9] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 773.728640][ T9] usb 9-1: can't read configurations, error -71 [ 773.941622][T12437] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1389'. [ 774.038182][T12437] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1389'. [ 774.047872][T12437] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1389'. [ 774.058854][T12437] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1389'. [ 775.225999][T12451] ubi0: attaching mtd0 [ 775.230577][T12451] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 775.251447][T12451] x_tables: ip_tables: osf match: only valid for protocol 6 [ 775.779107][T12452] input: syz1 as /devices/virtual/input/input12 [ 776.348348][T12460] netlink: 'syz.8.1392': attribute type 1 has an invalid length. [ 776.453013][T12460] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1392'. [ 777.372170][T12457] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 778.993194][T12486] overlayfs: failed to clone lowerpath [ 779.834917][T12492] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1399'. [ 779.843991][T12492] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1399'. [ 783.288489][T12512] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1404'. [ 783.744232][T12512] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1404'. [ 783.782709][T12512] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1404'. [ 783.792696][T12512] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1404'. [ 788.470041][T12592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 788.478217][T12592] IPv6: NLM_F_CREATE should be set when creating new route [ 788.485557][T12592] IPv6: NLM_F_CREATE should be set when creating new route [ 789.413124][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1424'. [ 789.431730][T12602] batman_adv: batadv0: Removing interface: vxlan0 [ 791.435923][T12622] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1427'. [ 796.109776][T12678] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 796.147698][T12678] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 801.890999][T12730] overlayfs: failed to clone upperpath [ 802.276064][ T7423] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 802.378298][T12738] xt_hashlimit: max too large, truncated to 1048576 [ 805.098618][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 805.534252][T12759] befs: (nbd5): No write support. Marking filesystem read-only [ 805.544695][T12759] syz.5.1454: attempt to access beyond end of device [ 805.544695][T12759] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 805.557898][T12759] befs: (nbd5): unable to read superblock [ 805.922518][ T7423] usb 10-1: device descriptor read/all, error -71 [ 808.547420][ T5822] Bluetooth: hci3: command 0x0405 tx timeout [ 808.561477][T12788] netlink: 'syz.8.1461': attribute type 11 has an invalid length. [ 808.728679][T12798] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1460'. [ 808.737863][T12798] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1460'. [ 808.748263][T12798] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1460'. [ 808.819375][T12798] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1460'. [ 810.731206][ T7421] IPVS: starting estimator thread 0... [ 810.824999][T12814] IPVS: using max 20 ests per chain, 48000 per kthread [ 811.180092][T12820] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1468'. [ 811.193771][T12820] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1468'. [ 811.223665][T12820] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1468'. [ 811.304279][T12820] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1468'. [ 815.916317][T12865] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1475'. [ 815.925392][T12865] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1475'. [ 815.935205][T12865] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1475'. [ 815.944514][T12865] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1475'. [ 818.182450][T12879] netlink: 'syz.5.1479': attribute type 1 has an invalid length. [ 819.175816][T12900] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1482'. [ 819.215756][T12900] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1482'. [ 819.264399][T12900] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1482'. [ 819.505966][T12900] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1482'. [ 820.596205][T12921] sctp: [Deprecated]: syz.5.1486 (pid 12921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 820.596205][T12921] Use struct sctp_sack_info instead [ 821.146338][T12925] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 821.408305][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 821.560536][T12945] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1489'. [ 821.670109][T12945] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1489'. [ 821.706909][T12945] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1489'. [ 821.724942][T12951] geneve2: entered promiscuous mode [ 821.739167][T12945] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1489'. [ 821.966511][T12958] loop7: detected capacity change from 0 to 16384 [ 823.429747][T12967] UHID_CREATE from different security context by process 490 (syz.8.1495), this is not allowed. [ 825.338963][T12987] ip6t_srh: unknown srh invflags 7D00 [ 831.482758][T13029] xt_NFQUEUE: number of total queues is 0 [ 832.170646][ T7390] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 832.496526][T13041] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1515'. [ 832.599635][T13041] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1515'. [ 832.720278][T13041] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1515'. [ 832.772424][T13041] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1515'. [ 832.945862][T13046] netlink: 'syz.8.1516': attribute type 10 has an invalid length. [ 833.025945][T13046] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 834.968575][T13070] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1519'. [ 834.977705][T13070] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1519'. [ 835.015480][T13070] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1519'. [ 835.020543][T13074] netlink: 220 bytes leftover after parsing attributes in process `syz.7.1522'. [ 836.077986][T13070] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1519'. [ 836.551983][T13074] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1522'. [ 836.592085][T13068] [U] ^C [ 837.983733][T13096] xt_connbytes: Forcing CT accounting to be enabled [ 837.990682][T13096] --map-set only usable from mangle table [ 842.738463][T13150] delete_channel: no stack [ 846.239541][T13184] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 847.329436][T13190] overlayfs: missing 'lowerdir' [ 848.734873][T13208] syz.7.1548: attempt to access beyond end of device [ 848.734873][T13208] nbd7: rw=0, sector=2, nr_sectors = 1 limit=0 [ 856.544429][ T5822] Bluetooth: hci3: command 0x0405 tx timeout [ 864.104889][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.125836][ T5822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 864.219680][ T5822] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 864.228138][ T5822] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 864.334934][ T5822] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 864.505428][ T5822] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 864.515789][ T5822] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 866.451269][ T8483] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.475536][ T5822] Bluetooth: hci6: command tx timeout [ 866.761946][T13314] ptrace attach of "./syz-executor exec"[7900] was attempted by " "[13314] [ 867.988246][ T8483] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.905769][ T5822] Bluetooth: hci6: command tx timeout [ 869.194902][ T8483] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.430292][ T7421] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 870.030001][ T8483] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.053811][T13277] chnl_net:caif_netlink_parms(): no params data found [ 870.199238][ T7421] usb 10-1: config 0 has no interfaces? [ 870.205140][ T7421] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 870.221975][ T7421] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.259961][ T7421] usb 10-1: config 0 descriptor?? [ 871.140496][ T5822] Bluetooth: hci6: command tx timeout [ 872.145510][T13328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.222201][T13277] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.235743][T13277] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.249050][T13328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.257334][T13277] bridge_slave_0: entered allmulticast mode [ 873.273088][ T5822] Bluetooth: hci6: command tx timeout [ 873.395881][T13277] bridge_slave_0: entered promiscuous mode [ 873.407210][T13277] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.414782][T13277] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.422017][T13277] bridge_slave_1: entered allmulticast mode [ 873.430635][T13277] bridge_slave_1: entered promiscuous mode [ 873.433571][ T7417] usb 10-1: USB disconnect, device number 5 [ 873.624255][T13277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.936273][T13277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.639761][T13277] team0: Port device team_slave_0 added [ 875.660795][T13277] team0: Port device team_slave_1 added [ 875.946342][T13406] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 877.693978][T13277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.701272][T13277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.729449][T13277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.742072][T13277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.749212][T13277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.775215][T13277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.997361][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 879.843073][T13448] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1590'. [ 879.903699][T13448] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1590'. [ 879.989746][T13448] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1590'. [ 880.004625][T13448] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1590'. [ 880.093889][ T8483] bridge_slave_1: left allmulticast mode [ 880.099581][ T8483] bridge_slave_1: left promiscuous mode [ 880.116268][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.138987][ T8483] bridge_slave_0: left allmulticast mode [ 880.234938][ T8483] bridge_slave_0: left promiscuous mode [ 881.171424][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1591'. [ 881.180915][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1591'. [ 881.198520][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.910836][T13482] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1596'. [ 883.927474][T13482] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1596'. [ 883.958673][T13482] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1596'. [ 884.079916][T13482] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1596'. [ 885.495862][T13498] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 885.503223][T13498] overlayfs: failed to set xattr on upper [ 885.509193][T13498] overlayfs: ...falling back to redirect_dir=nofollow. [ 885.516090][T13498] overlayfs: ...falling back to index=off. [ 885.521903][T13498] overlayfs: ...falling back to uuid=null. [ 885.527787][T13498] overlayfs: maximum fs stacking depth exceeded [ 886.424216][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:1) [ 888.868661][T13525] syz.7.1607: attempt to access beyond end of device [ 888.868661][T13525] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 891.075317][T13541] evm: overlay not supported [ 891.841021][ T8483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.886153][ T8483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.916615][ T8483] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 891.928799][ T8483] nlmon0: left promiscuous mode [ 891.936364][ T8483] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 891.949768][ T8483] bond0 (unregistering): Released all slaves [ 892.074406][T13277] hsr_slave_0: entered promiscuous mode [ 892.089080][T13277] hsr_slave_1: entered promiscuous mode [ 892.103017][T13277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 892.116945][T13277] Cannot create hsr debugfs directory [ 892.659229][T13545] input: syz1 as /devices/virtual/input/input14 [ 892.758541][T13546] veth0_vlan: left promiscuous mode [ 892.806158][T13546] veth0_vlan: entered promiscuous mode [ 898.740496][T13596] trusted_key: encrypted_key: insufficient parameters specified [ 899.854170][ T8483] hsr_slave_0: left promiscuous mode [ 899.910662][ T8483] hsr_slave_1: left promiscuous mode [ 899.983432][ T8483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.992163][ T8483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.008248][ T8483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.016420][ T8483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.085041][ T8483] veth1_macvtap: left promiscuous mode [ 900.118476][ T8483] veth0_macvtap: left promiscuous mode [ 900.124196][ T8483] veth1_vlan: left promiscuous mode [ 900.140665][ T8483] veth0_vlan: left promiscuous mode [ 903.418812][ T8483] team0 (unregistering): Port device team_slave_1 removed [ 903.476131][ T8483] team0 (unregistering): Port device team_slave_0 removed [ 903.978251][T13600] veth0_to_team: entered promiscuous mode [ 903.984555][T13600] veth0_to_team: entered allmulticast mode [ 909.198525][T13683] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 909.206473][T13683] F2FS-fs (loop19): Can't find valid F2FS filesystem in 1th superblock [ 909.214904][T13683] F2FS-fs (loop19): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 909.222730][T13683] F2FS-fs (loop19): Can't find valid F2FS filesystem in 2th superblock [ 909.236181][T13683] netlink: 'syz.9.1639': attribute type 1 has an invalid length. [ 909.244193][T13683] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1639'. [ 909.985270][T13684] overlayfs: failed to clone upperpath [ 910.748072][T13707] bridge0: port 3(erspan0) entered blocking state [ 910.755074][T13707] bridge0: port 3(erspan0) entered disabled state [ 910.761726][T13707] erspan0: entered allmulticast mode [ 910.768155][T13707] erspan0: entered promiscuous mode [ 910.773889][T13707] bridge0: port 3(erspan0) entered blocking state [ 910.780418][T13707] bridge0: port 3(erspan0) entered forwarding state [ 912.416192][T13277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 912.452520][T13277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 912.971953][T13732] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 913.013798][T13277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 913.032049][T13277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 913.602433][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 913.602451][ T29] audit: type=1326 audit(1736305149.156:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13745 comm="syz.9.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 913.636916][ T29] audit: type=1326 audit(1736305149.188:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13745 comm="syz.9.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 913.658596][ T29] audit: type=1326 audit(1736305149.188:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13745 comm="syz.9.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 913.701171][T13277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.793103][T13277] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.831031][ T29] audit: type=1326 audit(1736305149.188:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13745 comm="syz.9.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 913.890144][T13277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 913.915245][ T29] audit: type=1326 audit(1736305149.188:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13745 comm="syz.9.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 913.947425][T13277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 914.038637][ T29] audit: type=1326 audit(1736305149.188:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13745 comm="syz.9.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 914.343693][ T6302] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.350866][ T6302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.322604][ T29] audit: type=1326 audit(1736305149.188:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13745 comm="syz.9.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 915.323878][ T6302] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.351261][ T6302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.571619][ T29] audit: type=1326 audit(1736305149.188:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13745 comm="syz.9.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 916.628437][ T29] audit: type=1326 audit(1736305149.188:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13745 comm="syz.9.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 916.806959][ T29] audit: type=1326 audit(1736305149.188:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13745 comm="syz.9.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 917.563104][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 917.575245][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 917.586079][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 917.598544][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 917.606346][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 917.639963][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 919.513202][T13808] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1662'. [ 919.631287][ T5830] Bluetooth: hci0: command tx timeout [ 921.007348][T13785] chnl_net:caif_netlink_parms(): no params data found [ 921.635804][ T5830] Bluetooth: hci0: command tx timeout [ 922.174322][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 924.206475][ T5822] Bluetooth: hci0: command tx timeout [ 925.741000][T13785] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.755465][T13785] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.768655][T13785] bridge_slave_0: entered allmulticast mode [ 925.786052][T13785] bridge_slave_0: entered promiscuous mode [ 925.797198][T13785] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.810037][T13785] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.823041][T13785] bridge_slave_1: entered allmulticast mode [ 925.835587][T13785] bridge_slave_1: entered promiscuous mode [ 926.821490][ T5822] Bluetooth: hci0: command tx timeout [ 927.234666][T13874] netlink: 'syz.5.1674': attribute type 10 has an invalid length. [ 927.597879][T13874] hsr0: entered promiscuous mode [ 927.739510][T13874] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 927.750272][T13874] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 927.762813][T13874] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 927.839223][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 927.839237][ T29] audit: type=1326 audit(1736305164.068:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13872 comm="syz.6.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 927.846401][T13785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.867148][ T29] audit: type=1326 audit(1736305164.068:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13872 comm="syz.6.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 927.901817][ T29] audit: type=1326 audit(1736305164.068:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13872 comm="syz.6.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 927.937294][ T29] audit: type=1326 audit(1736305164.068:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13872 comm="syz.6.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 928.103694][ T29] audit: type=1326 audit(1736305164.068:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13872 comm="syz.6.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 928.473348][ T29] audit: type=1326 audit(1736305164.068:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13872 comm="syz.6.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 928.484673][T13785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.513865][T13883] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 928.530101][ T29] audit: type=1326 audit(1736305164.068:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13872 comm="syz.6.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 928.580262][ T29] audit: type=1326 audit(1736305164.068:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13872 comm="syz.6.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 928.645814][ T29] audit: type=1326 audit(1736305164.068:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13872 comm="syz.6.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 928.679973][ T29] audit: type=1326 audit(1736305164.068:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13872 comm="syz.6.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x7ffc0000 [ 928.949090][T13891] KVM: debugfs: duplicate directory 13891-7 [ 929.244365][T13893] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1680'. [ 931.292653][T13905] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 931.299732][T13905] overlayfs: failed to set xattr on upper [ 931.305558][T13905] overlayfs: ...falling back to redirect_dir=nofollow. [ 931.312410][T13905] overlayfs: ...falling back to index=off. [ 931.318265][T13905] overlayfs: ...falling back to uuid=null. [ 931.324126][T13905] overlayfs: maximum fs stacking depth exceeded [ 933.268922][T13785] team0: Port device team_slave_0 added [ 933.284632][T13785] team0: Port device team_slave_1 added [ 935.365631][T13917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 935.423704][T13914] overlayfs: failed to clone upperpath [ 935.465358][T13785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.472486][T13785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.498388][ C0] vkms_vblank_simulate: vblank timer overrun [ 935.504584][T13785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.517193][T13785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.524158][T13785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.550069][ C0] vkms_vblank_simulate: vblank timer overrun [ 935.556952][T13785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.103688][T13785] hsr_slave_0: entered promiscuous mode [ 938.166353][T13785] hsr_slave_1: entered promiscuous mode [ 938.517203][T13785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 938.526964][T13785] Cannot create hsr debugfs directory [ 940.362434][ T8483] bridge_slave_1: left allmulticast mode [ 940.372904][ T8483] bridge_slave_1: left promiscuous mode [ 940.492431][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.058657][ T8483] bridge_slave_0: left allmulticast mode [ 942.064536][ T8483] bridge_slave_0: left promiscuous mode [ 942.070888][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.355792][T13999] dccp_close: ABORT with 60 bytes unread [ 944.839278][ T8483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.913970][ T8483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.930954][ T8483] bond0 (unregistering): Released all slaves [ 946.484351][ T8483] hsr_slave_0: left promiscuous mode [ 946.623813][ T8483] hsr_slave_1: left promiscuous mode [ 946.919152][ T8483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.946699][ T8483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.043732][T14022] overlayfs: failed to clone upperpath [ 948.084531][T14028] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1706'. [ 948.093779][T14028] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1706'. [ 948.104321][T14028] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1706'. [ 948.115058][T14028] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1706'. [ 949.355983][ T8483] team0 (unregistering): Port device team_slave_1 removed [ 949.691740][ T8483] team0 (unregistering): Port device team_slave_0 removed [ 951.001006][T14043] overlayfs: failed to clone upperpath [ 952.848126][T14049] netlink: ct family unspecified [ 952.854805][T14049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 954.523836][T14079] lo speed is unknown, defaulting to 1000 [ 954.546357][T14079] lo speed is unknown, defaulting to 1000 [ 954.555215][T14079] lo speed is unknown, defaulting to 1000 [ 955.185232][T14079] infiniband sz1: set active [ 955.190303][T14079] infiniband sz1: added lo [ 955.203112][ T5902] lo speed is unknown, defaulting to 1000 [ 955.212052][T14079] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 955.216938][T14079] infiniband sz1: Couldn't open port 1 [ 955.315565][T14079] RDS/IB: sz1: added [ 955.320398][T14079] smc: adding ib device sz1 with port count 1 [ 955.326835][T14079] smc: ib device sz1 port 1 has pnetid [ 955.336861][T14079] lo speed is unknown, defaulting to 1000 [ 955.442302][T14079] lo speed is unknown, defaulting to 1000 [ 957.464180][ T5902] lo speed is unknown, defaulting to 1000 [ 959.395454][T14079] lo speed is unknown, defaulting to 1000 [ 959.460080][T14105] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1720'. [ 960.272417][T14079] lo speed is unknown, defaulting to 1000 [ 961.214184][T14079] lo speed is unknown, defaulting to 1000 [ 961.285507][T14079] lo speed is unknown, defaulting to 1000 [ 961.711266][T14118] delete_channel: no stack [ 962.542256][T13785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 962.599446][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1724'. [ 963.241109][T13785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 963.687253][T13785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 963.848244][T13785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 964.310275][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1729'. [ 964.490158][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1729'. [ 965.220641][T14153] openvswitch: netlink: Message has 1275 unknown bytes. [ 965.228021][T14153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 966.496483][T13785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.531716][T13785] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.575165][T13785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 966.585802][T13785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 966.813823][ T6373] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.821003][ T6373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.842178][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.849405][ T6373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.062365][T14168] program syz.5.1737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 968.088388][T14175] bridge0: port 4(syz_tun) entered blocking state [ 968.095414][T14175] bridge0: port 4(syz_tun) entered disabled state [ 968.102331][T14175] syz_tun: entered allmulticast mode [ 968.111081][T14175] syz_tun: entered promiscuous mode [ 968.118258][T14175] bridge0: port 4(syz_tun) entered blocking state [ 968.125161][T14175] bridge0: port 4(syz_tun) entered forwarding state [ 971.293997][T13785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.417125][T13785] veth0_vlan: entered promiscuous mode [ 971.425480][T13785] veth1_vlan: entered promiscuous mode [ 971.483136][T13785] veth0_macvtap: entered promiscuous mode [ 971.522703][T13785] veth1_macvtap: entered promiscuous mode [ 971.582806][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.593555][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.915457][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.926300][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.936425][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.946884][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.957981][T13785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.967531][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.978042][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.987993][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.998461][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.008312][T13785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.018786][T13785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.030224][T13785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 972.040175][T13785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.048976][T13785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.057772][T13785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.066536][T13785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.391330][T14218] Bluetooth: MGMT ver 1.23 [ 973.715250][ T8483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.723305][ T8483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.861640][ T8480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.869635][ T8480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.572241][ T5822] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 975.588160][ T5822] Bluetooth: hci0: command 0x0c1a tx timeout [ 975.599496][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 975.614508][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 975.624818][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 975.632884][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 975.650594][ T5830] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 975.658489][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 976.555301][T14253] lo speed is unknown, defaulting to 1000 [ 977.873191][ T5822] Bluetooth: hci6: command tx timeout [ 978.905956][T14253] chnl_net:caif_netlink_parms(): no params data found [ 979.003242][T14276] netlink: zone id is out of range [ 980.163204][ T5830] Bluetooth: hci6: command tx timeout [ 980.679580][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 980.882343][T14253] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.924384][T14253] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.931770][T14253] bridge_slave_0: entered allmulticast mode [ 980.938790][T14253] bridge_slave_0: entered promiscuous mode [ 980.946784][T14253] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.003210][T14253] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.767872][T14253] bridge_slave_1: entered allmulticast mode [ 981.777923][T14253] bridge_slave_1: entered promiscuous mode [ 981.933189][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 982.139294][ T5830] Bluetooth: hci6: command tx timeout [ 982.496837][T14253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.516164][T14253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.529791][ T5830] Bluetooth: hci6: command tx timeout [ 986.069363][T14253] team0: Port device team_slave_0 added [ 986.078996][T14253] team0: Port device team_slave_1 added [ 986.537926][T14367] input: syz1 as /devices/virtual/input/input17 [ 987.980596][T14373] 9pnet_virtio: no channels available for device syz [ 989.570888][T14253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.717960][T14253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.759424][T14253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.013628][T14376] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1772'. [ 990.949060][T14253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.966269][T14376] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1772'. [ 991.185538][T14253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.259404][T14376] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1772'. [ 991.272183][T14376] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1772'. [ 991.281949][T14253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.450886][T14253] hsr_slave_0: entered promiscuous mode [ 991.459280][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 991.498568][T14253] hsr_slave_1: entered promiscuous mode [ 991.516594][T14253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 991.528699][T14253] Cannot create hsr debugfs directory [ 992.222652][T14403] syz.7.1777: attempt to access beyond end of device [ 992.222652][T14403] nbd7: rw=0, sector=2, nr_sectors = 1 limit=0 [ 992.520438][ T6302] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.636137][T14411] sctp: [Deprecated]: syz.7.1779 (pid 14411) Use of struct sctp_assoc_value in delayed_ack socket option. [ 993.636137][T14411] Use struct sctp_sack_info instead [ 993.792049][ T6302] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.466860][ T6302] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.422853][ T6302] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.572376][T14453] syz.7.1788: attempt to access beyond end of device [ 998.572376][T14453] nbd7: rw=0, sector=2, nr_sectors = 1 limit=0 [ 999.428543][ T6302] bridge_slave_1: left allmulticast mode [ 999.487837][ T6302] bridge_slave_1: left promiscuous mode [ 999.493587][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.610641][ T6302] bridge_slave_0: left allmulticast mode [ 999.616339][ T6302] bridge_slave_0: left promiscuous mode [ 1000.432576][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.723291][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1002.723308][ T29] audit: type=1326 audit(1736305242.668:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14488 comm="syz.6.1794" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00dcd85d29 code=0x0 [ 1005.412016][T14517] Set syz1 is full, maxelem 65536 reached [ 1005.733378][T14526] overlayfs: failed to clone upperpath [ 1006.124483][T14528] syz.7.1799: attempt to access beyond end of device [ 1006.124483][T14528] nbd7: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1010.143941][ T6302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1010.221177][ T6302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1010.400995][T14561] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1803'. [ 1010.423969][ T6302] bond0 (unregistering): Released all slaves [ 1013.188853][T14594] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1013.597698][T14586] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1015.799872][T14253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1015.937860][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1814'. [ 1016.018233][T14253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1016.264471][T14622] netlink: 'syz.9.1813': attribute type 1 has an invalid length. [ 1016.321968][ T6302] hsr_slave_0: left promiscuous mode [ 1016.342245][ T6302] hsr_slave_1: left promiscuous mode [ 1016.356391][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.364531][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.395612][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.403669][ T6302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.442332][ T6302] veth1_macvtap: left promiscuous mode [ 1016.448269][ T6302] veth0_macvtap: left promiscuous mode [ 1016.453867][ T6302] veth1_vlan: left promiscuous mode [ 1016.469304][ T6302] veth0_vlan: left promiscuous mode [ 1017.487030][T14635] dlm: no local IP address has been set [ 1017.492630][T14635] dlm: cannot start dlm midcomms -107 [ 1018.897801][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1021.460686][T14645] block nbd5: shutting down sockets [ 1024.185211][ T6302] team0 (unregistering): Port device team_slave_1 removed [ 1024.250468][T14695] No such timeout policy "syz1" [ 1024.434337][ T6302] team0 (unregistering): Port device team_slave_0 removed [ 1026.854138][T14253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1026.959722][T14253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1027.047474][T14253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.064968][T14253] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.096034][T14253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1027.106649][T14253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1027.124488][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.131643][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.149507][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.156635][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.749012][T14725] syz.7.1829: attempt to access beyond end of device [ 1027.749012][T14725] nbd7: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1028.237388][ T5830] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1029.161527][T14736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1029.645920][T14750] binder: 14733:14750 ioctl c0306201 0 returned -14 [ 1029.657591][T14750] binder: 14733:14750 ioctl c0306201 0 returned -14 [ 1029.666044][T14750] binder: 14733:14750 ioctl c0306201 0 returned -14 [ 1030.467599][T14253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.606265][T14754] vlan2: entered promiscuous mode [ 1030.616235][T14754] batman_adv: batadv0: Adding interface: vlan2 [ 1030.629335][T14754] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.663550][T14754] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1030.713307][T14253] veth0_vlan: entered promiscuous mode [ 1031.743720][T14253] veth1_vlan: entered promiscuous mode [ 1031.962075][T14767] No source specified [ 1032.711090][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1032.734128][T14778] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1838'. [ 1032.751296][T14778] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1838'. [ 1032.763431][T14778] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1838'. [ 1032.873119][T14778] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1838'. [ 1034.026207][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1034.048872][ T5822] Bluetooth: hci5: command 0x0405 tx timeout [ 1034.256154][T14800] Invalid source name [ 1034.260303][T14800] UBIFS error (pid: 14800): cannot open "./file0", error -22 [ 1034.500607][T14798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1034.876781][T14798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1034.935449][ T29] audit: type=1326 audit(1736305276.459:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14804 comm="syz.9.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 1034.959439][ T29] audit: type=1326 audit(1736305276.459:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14804 comm="syz.9.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 1034.981498][ T29] audit: type=1326 audit(1736305276.470:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14804 comm="syz.9.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 1035.003854][ T29] audit: type=1326 audit(1736305276.470:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14804 comm="syz.9.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 1035.026214][ T29] audit: type=1326 audit(1736305276.470:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14804 comm="syz.9.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 1035.048249][ T29] audit: type=1326 audit(1736305276.470:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14804 comm="syz.9.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 1035.070412][ T29] audit: type=1326 audit(1736305276.470:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14804 comm="syz.9.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 1035.092384][ T29] audit: type=1326 audit(1736305276.470:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14804 comm="syz.9.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 1035.114153][ T29] audit: type=1326 audit(1736305276.470:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14804 comm="syz.9.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 1035.135733][ T29] audit: type=1326 audit(1736305276.470:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14804 comm="syz.9.1843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed0785d29 code=0x7ffc0000 [ 1035.251068][T14798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1035.260272][T14798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1035.271245][T14798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1035.617422][T14817] overlayfs: failed to clone upperpath [ 1036.641091][T14794] lo speed is unknown, defaulting to 1000 [ 1037.595948][T14794] chnl_net:caif_netlink_parms(): no params data found [ 1038.080480][T14798] Bluetooth: hci0: command tx timeout [ 1038.462798][T14794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.606253][T14794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.645193][T14794] bridge_slave_0: entered allmulticast mode [ 1038.667858][T14794] bridge_slave_0: entered promiscuous mode [ 1038.691154][T14794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.707544][T14794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.724558][T14794] bridge_slave_1: entered allmulticast mode [ 1038.731757][T14794] bridge_slave_1: entered promiscuous mode [ 1039.229241][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1039.251578][T14794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.449398][T14865] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1039.547054][T14863] geneve2: entered promiscuous mode [ 1039.552868][T14863] geneve2: entered allmulticast mode [ 1040.071700][T14798] Bluetooth: hci0: command tx timeout [ 1040.148937][T14794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.106880][T14794] team0: Port device team_slave_0 added [ 1042.116445][T14798] Bluetooth: hci0: command tx timeout [ 1042.155491][T14794] team0: Port device team_slave_1 added [ 1043.155427][T14794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.172983][T14794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.219217][T14794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.272396][T14794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.279379][T14794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.305545][T14794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.416101][T14900] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1043.424016][T14900] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 1043.432407][T14900] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1043.440300][T14900] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 1044.488147][T14798] Bluetooth: hci0: command tx timeout [ 1047.305066][T13787] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1047.334952][T13787] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1047.351848][T13787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1047.465871][T14794] hsr_slave_0: entered promiscuous mode [ 1047.484527][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1047.495389][ T5830] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1047.503736][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1047.606242][T14794] hsr_slave_1: entered promiscuous mode [ 1047.617835][T14794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1048.661874][T14794] Cannot create hsr debugfs directory [ 1049.496900][T14918] lo speed is unknown, defaulting to 1000 [ 1049.729612][ T5830] Bluetooth: hci6: command tx timeout [ 1049.744684][T14949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1050.592995][ T2128] bridge_slave_1: left allmulticast mode [ 1050.603586][ T2128] bridge_slave_1: left promiscuous mode [ 1050.609345][ T2128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.746009][ T2128] bridge_slave_0: left allmulticast mode [ 1050.751704][ T2128] bridge_slave_0: left promiscuous mode [ 1051.533849][ T2128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.950599][ T5830] Bluetooth: hci6: command tx timeout [ 1053.313674][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1875'. [ 1053.387224][T14999] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1053.417226][T14999] netlink: 'syz.6.1874': attribute type 9 has an invalid length. [ 1053.425034][T14999] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1874'. [ 1054.176160][ T5830] Bluetooth: hci6: command tx timeout [ 1054.478141][ T2128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.490237][ T2128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.502242][ T2128] bond0 (unregistering): Released all slaves [ 1056.526157][ T5830] Bluetooth: hci6: command tx timeout [ 1058.108652][T15032] syz.5.1880: attempt to access beyond end of device [ 1058.108652][T15032] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1059.820569][T15048] overlayfs: failed to resolve '/': -2 [ 1062.282333][ T2128] hsr_slave_0: left promiscuous mode [ 1062.290069][ T2128] hsr_slave_1: left promiscuous mode [ 1062.412681][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.426365][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1062.487465][ T2128] veth1_vlan: left promiscuous mode [ 1062.516622][ T2128] veth0_vlan: left promiscuous mode [ 1062.580516][T15079] netlink: 'syz.6.1888': attribute type 10 has an invalid length. [ 1063.201741][T15095] netlink: 'syz.9.1889': attribute type 4 has an invalid length. [ 1063.225766][ T2128] team0 (unregistering): Port device team_slave_1 removed [ 1063.311664][ T2128] team0 (unregistering): Port device team_slave_0 removed [ 1063.829382][T15079] lo: entered promiscuous mode [ 1063.868916][T15079] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1069.097258][T14794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1069.114968][T14918] chnl_net:caif_netlink_parms(): no params data found [ 1069.161205][T14794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1069.205205][T14794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1069.219360][T15121] block nbd5: shutting down sockets [ 1069.254572][T14794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1070.448039][T14918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.455179][T14918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.701060][T14918] bridge_slave_0: entered allmulticast mode [ 1070.708279][T14918] bridge_slave_0: entered promiscuous mode [ 1070.719889][T15159] veth0_to_team: entered promiscuous mode [ 1070.725802][T15159] veth0_to_team: entered allmulticast mode [ 1072.775931][T14918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.783070][T14918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.804072][T14918] bridge_slave_1: entered allmulticast mode [ 1072.811265][T14918] bridge_slave_1: entered promiscuous mode [ 1074.978878][T14918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.057223][T14918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.680205][T14918] team0: Port device team_slave_0 added [ 1076.692969][T14918] team0: Port device team_slave_1 added [ 1076.826959][T14918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.834944][T14918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1076.902400][T14918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.925197][T14918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.943081][T14918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.017740][T14918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.906713][T14794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.083928][T14794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.153284][T14794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1078.163672][T14794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1079.386178][ T6302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.393397][ T6302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.663973][ T6302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.671127][ T6302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.642837][T15227] IPv6: sit1: Disabled Multicast RS [ 1082.077328][T14918] hsr_slave_0: entered promiscuous mode [ 1082.147167][T14918] hsr_slave_1: entered promiscuous mode [ 1082.178200][T14918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1082.221474][T14918] Cannot create hsr debugfs directory [ 1083.625220][T15262] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1915'. [ 1083.966641][T15262] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1083.976393][T15262] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1083.989051][T15262] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1084.011088][T15262] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1084.022169][T15262] geneve3: entered allmulticast mode [ 1084.079242][T14794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.370627][T15281] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1920'. [ 1084.570409][T14794] veth0_vlan: entered promiscuous mode [ 1084.603101][T14794] veth1_vlan: entered promiscuous mode [ 1085.046367][T15300] openvswitch: netlink: Tunnel attr 54 out of range max 16 [ 1085.768482][T14794] veth0_macvtap: entered promiscuous mode [ 1085.777498][T14794] veth1_macvtap: entered promiscuous mode [ 1085.799490][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.809990][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.820075][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.830871][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.840845][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.851654][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.862690][T14794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1085.883625][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.894650][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.917658][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.940967][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.962113][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.976371][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1086.009213][T14794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1086.159953][T14794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.188985][T14794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.214784][T14794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.241975][T14794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.592670][ T6302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.637929][ T6302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.709965][ T6302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.726793][ T6302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.795419][T14918] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1086.824042][T14918] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1086.851547][T14918] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1086.863408][T14918] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1087.120961][T14918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.139298][T14918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.171415][T14918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1088.147283][T14918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1088.779376][ T2128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.786549][ T2128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.157750][ T2128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.164930][ T2128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.547130][T14918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1091.798913][T15346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1932'. [ 1092.391443][T14918] veth0_vlan: entered promiscuous mode [ 1092.401779][T14918] veth1_vlan: entered promiscuous mode [ 1092.529796][T14918] veth0_macvtap: entered promiscuous mode [ 1092.552142][T14918] veth1_macvtap: entered promiscuous mode [ 1092.569783][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.619413][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.015581][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1093.026234][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.036161][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1093.046847][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.056706][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1093.067191][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.078975][T14918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1093.293131][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1093.312552][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.333288][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1093.352573][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.571322][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1093.622190][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.632271][T14918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1093.642849][T14918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.254805][T15358] Bluetooth: Invalid esc byte 0x02 [ 1094.528155][T14918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1094.557540][T14918] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.566614][T14918] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.575610][T14918] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.584550][T14918] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.178037][T15353] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1098.448994][T15374] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1098.457305][T15374] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1098.773149][T15374] bridge0: port 3(erspan0) entered blocking state [ 1098.779704][T15374] bridge0: port 3(erspan0) entered disabled state [ 1098.786445][T15374] erspan0: entered allmulticast mode [ 1098.792793][T15374] erspan0: entered promiscuous mode [ 1098.798497][T15374] bridge0: port 3(erspan0) entered blocking state [ 1098.804992][T15374] bridge0: port 3(erspan0) entered forwarding state [ 1098.968205][ T2128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.976143][ T2128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.358071][T15380] netlink: 'syz.5.1939': attribute type 9 has an invalid length. [ 1099.519622][T15380] netlink: 'syz.5.1939': attribute type 6 has an invalid length. [ 1099.763868][ T6302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.847152][ T6302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.909287][T15417] orangefs_mount: mount request failed with -4 [ 1104.037408][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1104.654741][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1107.130597][T15456] syz.0.1948: attempt to access beyond end of device [ 1107.130597][T15456] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1110.574999][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1110.575053][ T29] audit: type=1800 audit(1736309441.947:181): pid=15494 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1959" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1110.768935][T15494] 9pnet_fd: Insufficient options for proto=fd [ 1110.842930][T15505] xt_TCPMSS: Only works on TCP SYN packets [ 1111.723771][T15513] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1965'. [ 1113.372057][T15530] loop2: detected capacity change from 0 to 7 [ 1113.625816][T15530] Dev loop2: unable to read RDB block 7 [ 1113.631734][T15530] loop2: AHDI p1 [ 1113.635496][T15530] loop2: partition table partially beyond EOD, truncated [ 1114.607828][T15290] udevd[15290]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1118.394151][T15574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1976'. [ 1118.707293][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807f98f000: rx timeout, send abort [ 1118.718128][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807f98f000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1118.958341][T15582] tc_dump_action: action bad kind [ 1120.989973][T15600] netlink: 'syz.0.1979': attribute type 1 has an invalid length. [ 1125.014462][T15633] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1988'. [ 1129.391641][T15679] overlayfs: failed to clone upperpath [ 1129.582069][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1131.150643][T15708] netlink: 'syz.3.2003': attribute type 3 has an invalid length. [ 1133.434422][ T5829] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1135.188484][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 1137.395038][T15760] hub 6-0:1.0: USB hub found [ 1137.402353][T15760] hub 6-0:1.0: 1 port detected [ 1137.733503][ T5829] usb 4-1: device descriptor read/all, error -71 [ 1139.976363][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2021'. [ 1141.898621][T15798] rdma_rxe: rxe_newlink: failed to add lo [ 1141.991320][T15798] lo speed is unknown, defaulting to 1000 [ 1141.997380][T15798] lo speed is unknown, defaulting to 1000 [ 1142.008515][T15798] lo speed is unknown, defaulting to 1000 [ 1142.027070][T15798] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1142.053176][T15806] »»»»»»: renamed from lo [ 1142.083586][ T5829] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1143.128602][T15798] »»»»»» speed is unknown, defaulting to 1000 [ 1143.137146][T15798] »»»»»» speed is unknown, defaulting to 1000 [ 1143.144540][T15798] »»»»»» speed is unknown, defaulting to 1000 [ 1143.151584][T15798] »»»»»» speed is unknown, defaulting to 1000 [ 1143.160812][T15798] »»»»»» speed is unknown, defaulting to 1000 [ 1143.169761][T15798] »»»»»» speed is unknown, defaulting to 1000 [ 1143.179247][T15798] »»»»»» speed is unknown, defaulting to 1000 [ 1143.181491][ T5829] usb 4-1: device descriptor read/all, error -71 [ 1143.226418][ T5829] usb usb4-port1: attempt power cycle [ 1146.339793][T15832] netlink: 'syz.9.2032': attribute type 1 has an invalid length. [ 1149.225346][T15880] Smack: duplicate mount options [ 1149.949626][T15887] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2040'. [ 1151.522457][T15908] gfs2: not a GFS2 filesystem [ 1152.469856][T15902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.077016][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1155.095586][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2055'. [ 1155.216515][T15962] netem: invalid attributes len -9 [ 1155.253034][T15966] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2054'. [ 1155.264144][T15962] netem: change failed [ 1155.994239][ T5902] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1156.022628][ T5902] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1156.272890][ T7421] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1156.929548][ T7423] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1157.115019][ T7423] usb 6-1: Using ep0 maxpacket: 16 [ 1157.167315][ T7423] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.546203][ T7423] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.556468][ T7423] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1157.569817][ T7423] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1157.579011][ T7423] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.668950][ T7423] usb 6-1: config 0 descriptor?? [ 1157.934593][ T7421] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1158.024467][ T7421] usb 4-1: no configurations [ 1158.029181][ T7421] usb 4-1: can't read configurations, error -22 [ 1159.239958][ T7423] wacom 0003:056A:0084.0007: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.5-1/input0 [ 1159.401891][ T7423] usb 6-1: USB disconnect, device number 3 [ 1160.322012][T16032] syz.0.2067: attempt to access beyond end of device [ 1160.322012][T16032] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1166.369443][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1167.382881][T16082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1167.648611][T16086] No such timeout policy "syz1" [ 1168.733059][T16085] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2080'. [ 1168.810204][T16085] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2080'. [ 1168.819198][T16085] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2080'. [ 1168.884187][T14798] Bluetooth: hci0: command 0x0406 tx timeout [ 1168.898552][T16092] netlink: 'syz.3.2082': attribute type 11 has an invalid length. [ 1169.333560][T16105] program syz.3.2082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1170.616505][T16118] netlink: 'syz.9.2086': attribute type 1 has an invalid length. [ 1170.624294][T16118] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.2086'. [ 1170.933833][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1171.618013][T16126] loop7: detected capacity change from 0 to 16384 [ 1172.740782][T16140] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1175.915280][T16172] netlink: 312 bytes leftover after parsing attributes in process `syz.9.2097'. [ 1179.523831][T16200] overlayfs: failed to clone upperpath [ 1180.230725][T16210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2105'. [ 1182.290585][T16230] [U] [ 1182.293704][T16230] [U] [ 1182.296421][T16230] [U] [ 1182.299129][T16230] [U] [ 1182.751961][T16230] [U] [ 1182.754702][T16230] [U] [ 1182.757412][T16230] [U] [ 1182.760123][T16230] [U] [ 1183.028756][T16230] [U] [ 1183.031506][T16230] [U] [ 1183.034211][T16230] [U] [ 1183.317081][T16230] [U] [ 1184.066536][T14798] Bluetooth: hci6: command 0x0406 tx timeout [ 1184.301158][T16250] overlayfs: failed to clone upperpath [ 1192.106777][T16306] syz.0.2128: attempt to access beyond end of device [ 1192.106777][T16306] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1197.985902][T16370] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2141'. [ 1198.119388][T16370] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2141'. [ 1198.144765][T16370] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2141'. [ 1200.651638][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2146'. [ 1203.946185][T16492] syz.5.2154: attempt to access beyond end of device [ 1203.946185][T16492] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1205.965378][T16520] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2155'. [ 1205.974676][ T30] INFO: task syz.7.1836:14766 blocked for more than 144 seconds. [ 1205.983328][ T30] Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 1205.990993][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1206.090065][T16520] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2155'. [ 1206.310069][T16520] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2155'. [ 1206.321728][ T30] task:syz.7.1836 state:D stack:23088 pid:14766 tgid:14762 ppid:8111 flags:0x00004004 [ 1207.130810][ T30] Call Trace: [ 1207.146599][ T30] [ 1207.155219][ T30] __schedule+0x17fb/0x4be0 [ 1207.174335][ T30] ? __pfx___schedule+0x10/0x10 [ 1207.186725][ T30] ? __pfx_lock_release+0x10/0x10 [ 1207.370655][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1207.584521][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1207.611588][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1207.626300][ T30] ? schedule+0x90/0x320 [ 1207.701656][ T30] schedule+0x14b/0x320 [ 1207.763846][ T30] ? down_read+0x6a5/0xa40 [ 1207.787630][ T30] schedule_preempt_disabled+0x13/0x30 [ 1207.793182][ T30] down_read+0x705/0xa40 [ 1207.809267][ T30] ? __pfx_down_read+0x10/0x10 [ 1207.814127][ T30] super_lock+0x27c/0x400 [ 1207.818494][ T30] ? __pfx_lock_release+0x10/0x10 [ 1207.860662][ T30] ? __pfx_super_lock+0x10/0x10 [ 1207.870593][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1207.879157][ T30] iterate_supers+0x8c/0x190 [ 1207.889925][ T30] ? __pfx_quota_sync_one+0x10/0x10 [ 1207.906422][ T30] __se_sys_quotactl+0x38e/0xa30 [ 1207.915807][ T30] ? __pfx___se_sys_quotactl+0x10/0x10 [ 1207.921498][ T30] ? do_syscall_64+0x100/0x230 [ 1207.938118][ T30] ? do_syscall_64+0xb6/0x230 [ 1207.943452][ T30] do_syscall_64+0xf3/0x230 [ 1207.954175][ T30] ? clear_bhb_loop+0x35/0x90 [ 1207.964956][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.975748][ T30] RIP: 0033:0x7feacff85d29 [ 1207.990627][ T30] RSP: 002b:00007fead0da2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 1208.005776][ T30] RAX: ffffffffffffffda RBX: 00007fead0176160 RCX: 00007feacff85d29 [ 1208.029846][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 1208.041761][ T30] RBP: 00007fead0001b08 R08: 0000000000000000 R09: 0000000000000000 [ 1208.054066][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1208.068166][ T30] R13: 0000000000000000 R14: 00007fead0176160 R15: 00007ffef4e54c18 [ 1208.090532][ T30] [ 1208.097323][ T30] [ 1208.097323][ T30] Showing all locks held in the system: [ 1208.123371][ T30] 1 lock held by khungtaskd/30: [ 1208.166689][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 1208.193274][ T30] 2 locks held by getty/5573: [ 1208.219511][ T30] #0: ffff8880315a50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1208.238385][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 1208.248637][ T30] 1 lock held by syz-executor/5827: [ 1208.257903][ T30] #0: ffff88803022e0e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 1208.268178][ T30] 2 locks held by kworker/u8:10/6373: [ 1208.279297][ T30] #0: ffff88801e3e2148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1208.290652][ T30] #1: ffffc9001a6e7d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1208.302863][ T30] 1 lock held by syz.7.1836/14766: [ 1208.307988][ T30] #0: ffff88803022e0e0 (&type->s_umount_key#55){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 1208.317964][ T30] 1 lock held by syz.0.2152/16510: [ 1208.323251][ T30] [ 1208.325598][ T30] ============================================= [ 1208.325598][ T30] [ 1208.352088][ T30] NMI backtrace for cpu 1 [ 1208.356456][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 1208.366973][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1208.377043][ T30] Call Trace: [ 1208.380332][ T30] [ 1208.383274][ T30] dump_stack_lvl+0x241/0x360 [ 1208.387977][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1208.393208][ T30] ? __pfx__printk+0x10/0x10 [ 1208.397830][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1208.402771][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1208.408233][ T30] ? _printk+0xd5/0x120 [ 1208.412383][ T30] ? __pfx__printk+0x10/0x10 [ 1208.416962][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1208.421809][ T30] ? __pfx__printk+0x10/0x10 [ 1208.426391][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1208.431409][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1208.437387][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1208.443366][ T30] watchdog+0xff6/0x1040 [ 1208.447599][ T30] ? watchdog+0x1ea/0x1040 [ 1208.452012][ T30] ? __pfx_watchdog+0x10/0x10 [ 1208.456680][ T30] kthread+0x2f0/0x390 [ 1208.460744][ T30] ? __pfx_watchdog+0x10/0x10 [ 1208.465418][ T30] ? __pfx_kthread+0x10/0x10 [ 1208.470000][ T30] ret_from_fork+0x4b/0x80 [ 1208.474408][ T30] ? __pfx_kthread+0x10/0x10 [ 1208.478987][ T30] ret_from_fork_asm+0x1a/0x30 [ 1208.483771][ T30] [ 1208.487584][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1208.493253][ C0] NMI backtrace for cpu 0 [ 1208.493265][ C0] CPU: 0 UID: 0 PID: 16541 Comm: dhcpcd-run-hook Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 1208.493284][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1208.493294][ C0] RIP: 0010:do_raw_spin_lock+0x1ec/0x370 [ 1208.493318][ C0] Code: 45 48 8b 44 24 38 48 c7 04 02 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 00 00 00 0f 85 80 01 00 00 48 8d 65 d8 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 4c 89 e7 48 c7 c6 a0 ef [ 1208.493331][ C0] RSP: 0000:ffffc90004b4f950 EFLAGS: 00000246 [ 1208.493346][ C0] RAX: 2a04f28054d99d00 RBX: ffffc90004b4fe60 RCX: 0000000000000001 [ 1208.493358][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90004b4f900 [ 1208.493369][ C0] RBP: ffffc90004b4f970 R08: 0000000000000003 R09: fffff52000969f20 [ 1208.493381][ C0] R10: dffffc0000000000 R11: fffff52000969f20 R12: ffff88801eea1ae0 [ 1208.493392][ C0] R13: 1ffff92000969f20 R14: ffffc90004b4f900 R15: 1ffff11003dd435d [ 1208.493405][ C0] FS: 00007f43e9750380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1208.493419][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1208.493430][ C0] CR2: 0000558f7713ab91 CR3: 0000000058f1c000 CR4: 00000000003526f0 [ 1208.493445][ C0] DR0: 00000000000000fa DR1: 0000000000000000 DR2: 0000000000000000 [ 1208.493454][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1208.493465][ C0] Call Trace: [ 1208.493471][ C0] [ 1208.493477][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1208.493494][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1208.493512][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1208.493535][ C0] ? nmi_handle+0x2a/0x5a0 [ 1208.493562][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1208.493581][ C0] ? nmi_handle+0x14f/0x5a0 [ 1208.493597][ C0] ? nmi_handle+0x2a/0x5a0 [ 1208.493614][ C0] ? do_raw_spin_lock+0x1ec/0x370 [ 1208.493632][ C0] ? default_do_nmi+0x63/0x160 [ 1208.493649][ C0] ? exc_nmi+0x123/0x1f0 [ 1208.493665][ C0] ? end_repeat_nmi+0xf/0x53 [ 1208.493684][ C0] ? do_raw_spin_lock+0x1ec/0x370 [ 1208.493703][ C0] ? do_raw_spin_lock+0x1ec/0x370 [ 1208.493723][ C0] ? do_raw_spin_lock+0x1ec/0x370 [ 1208.493742][ C0] [ 1208.493747][ C0] [ 1208.493753][ C0] handle_pte_fault+0x878/0x5ed0 [ 1208.493778][ C0] ? mark_lock+0x9a/0x360 [ 1208.493795][ C0] ? __pfx_handle_pte_fault+0x10/0x10 [ 1208.493813][ C0] ? __lock_acquire+0x1397/0x2100 [ 1208.493836][ C0] ? reacquire_held_locks+0x3eb/0x690 [ 1208.493853][ C0] ? lock_vma_under_rcu+0x34b/0x790 [ 1208.493876][ C0] ? __pfx_reacquire_held_locks+0x10/0x10 [ 1208.493900][ C0] handle_mm_fault+0x1053/0x1ad0 [ 1208.493928][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 1208.493943][ C0] ? lock_vma_under_rcu+0x602/0x790 [ 1208.493961][ C0] ? lock_vma_under_rcu+0x1dd/0x790 [ 1208.493985][ C0] ? exc_page_fault+0x113/0x8b0 [ 1208.494003][ C0] exc_page_fault+0x459/0x8b0 [ 1208.494024][ C0] asm_exc_page_fault+0x26/0x30 [ 1208.494043][ C0] RIP: 0033:0x7f43e99d172f [ 1208.494056][ C0] Code: 8b 45 00 49 8b 7c 24 08 48 83 c0 48 48 39 c7 74 05 e8 05 d1 fc ff 49 83 c4 10 eb df 48 8b 7d 10 48 39 ef 74 05 e8 f1 d0 fc ff <80> 65 21 f7 48 89 ef be 02 00 00 00 e8 f2 eb ff ff 58 5b 5d 41 5c [ 1208.494068][ C0] RSP: 002b:00007ffc67b03680 EFLAGS: 00010246 [ 1208.494081][ C0] RAX: 0000000000000002 RBX: 00000000ffffffff RCX: 000000000000006a [ 1208.494091][ C0] RDX: 0000558f77139910 RSI: 00007f43e9a42e3c RDI: 0000558f7713ab70 [ 1208.494103][ C0] RBP: 0000558f7713ab70 R08: 0000000000000000 R09: 0000000000000000 [ 1208.494113][ C0] R10: 00007f43e9a89088 R11: 0000000000000246 R12: 0000558f7713ab70 [ 1208.494123][ C0] R13: 00007f43e9a50470 R14: 0000000000000001 R15: 0000558f77139910 [ 1208.494142][ C0] [ 1208.906178][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1208.913066][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00038-g09a0fa92e5b4 #0 [ 1208.923583][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1208.933655][ T30] Call Trace: [ 1208.936950][ T30] [ 1208.939898][ T30] dump_stack_lvl+0x241/0x360 [ 1208.944606][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1208.949826][ T30] ? __pfx__printk+0x10/0x10 [ 1208.954429][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1208.960429][ T30] ? vscnprintf+0x5d/0x90 [ 1208.964770][ T30] panic+0x349/0x880 [ 1208.968679][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1208.974849][ T30] ? __pfx_panic+0x10/0x10 [ 1208.979273][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1208.984656][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1208.990213][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1208.995595][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1209.001760][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1209.007930][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1209.014092][ T30] watchdog+0x1035/0x1040 [ 1209.018435][ T30] ? watchdog+0x1ea/0x1040 [ 1209.022863][ T30] ? __pfx_watchdog+0x10/0x10 [ 1209.027547][ T30] kthread+0x2f0/0x390 [ 1209.031630][ T30] ? __pfx_watchdog+0x10/0x10 [ 1209.036303][ T30] ? __pfx_kthread+0x10/0x10 [ 1209.040888][ T30] ret_from_fork+0x4b/0x80 [ 1209.045312][ T30] ? __pfx_kthread+0x10/0x10 [ 1209.049911][ T30] ret_from_fork_asm+0x1a/0x30 [ 1209.054684][ T30] [ 1209.057939][ T30] Kernel Offset: disabled [ 1209.062258][ T30] Rebooting in 86400 seconds..